• info
• discussion
• exploit
• solution
• references

Hylafax Faxsurvey Remote Command Execution Vulnerability

Solution:
Disable the affected script and/or upgrade to a newer version of Hylafax.


Hylafax Hylafax 4.0 pl2

• Hylafax security-patch.sh
  http://www.hylafax.org/patches/security-patch.sh