• info
• discussion
• exploit
• solution
• references

Hylafax hfaxd Local Format String Vulnerability

Solution:
The vendor has released a patch that will eliminate this vulnerability.

S.u.S.E. has released an advisory and patched upgrades.

FreeBSD has released an advisory and patched upgrades for i386 versions of FreeBSD.


Hylafax Hylafax 4.0 pl2

• HylaFax hfaxd-vulnerability.patch
  http://www.hylafax.org/patches/hfaxd-vulnerability.patch

Hylafax Hylafax 4.0 pl0

• HylaFax hfaxd-vulnerability.patch
  http://www.hylafax.org/patches/hfaxd-vulnerability.patch

Hylafax Hylafax 4.0 pl1

• HylaFax hfaxd-vulnerability.patch
  http://www.hylafax.org/patches/hfaxd-vulnerability.patch

Hylafax Hylafax 4.1 -beta2

• FreeBSD 4 i386 hylafax-4.1.b2_2.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/comms/h ylafax-4.1.b2_2.tgz


• FreeBSD 5 i386 hylafax-4.1.b2_2.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-5-current/comms/ hylafax-4.1.b2_2.tgz


• HylaFax hfaxd-vulnerability.patch
  http://www.hylafax.org/patches/hfaxd-vulnerability.patch


• S.u.S.E. 6.3 i386 hylafax-4.1beta2-252.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/n2/hylafax-4.1beta2-252.i3 86.rpm


• S.u.S.E. 6.3 alpha hylafax-4.1beta2-211.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.3/n2/hylafax-4.1beta2-211.alp ha.rpm


• S.u.S.E. 6.4 alpha hylafax-4.1beta2-211.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/n2/hylafax-4.1beta2-211.alp ha.rpm


• S.u.S.E. 6.4 i386 hylafax-4.1beta2-253.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/n2/hylafax-4.1beta2-253.i3 86.rpm


• S.u.S.E. 6.4 ppc hylafax-4.1beta2-165.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/n2/hylafax-4.1beta2-165.ppc .rpm


• S.u.S.E. 7.0 alpha hylafax-4.1beta2-211.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/n2/hylafax-4.1beta2-211.alp ha.rpm


• S.u.S.E. 7.0 i386 hylafax-4.1beta2-254.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/n2/hylafax-4.1beta2-254.i3 86.rpm


• S.u.S.E. 7.0 ppc hylafax-4.1beta2-165.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/n2/hylafax-4.1beta2-165.ppc .rpm


• S.u.S.E. 7.0 sparc hylafax-4.1beta2-218.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/n2/hylafax-4.1beta2-218.s parc.rpm


• S.u.S.E. 7.1 i386 hylafax-4.1beta2-251.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/n3/hylafax-4.1beta2-251.i3 86.rpm


• S.u.S.E. 7.1 ppc hylafax-4.1beta2-164.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/n3/hylafax-4.1beta2-164.ppc .rpm


• S.u.S.E. 7.1 sparc hylafax-4.1beta2-218.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/n3/hylafax-4.1beta2-218.s parc.rpm

Hylafax Hylafax 4.1 -beta1

• HylaFax hfaxd-vulnerability.patch
  http://www.hylafax.org/patches/hfaxd-vulnerability.patch


• MandrakeSoft 1.0.1 hylafax-4.1-0.10mdk.i586.rpm
  ftp://ftp.vlug.org/dists/mandrake/updates/1.0.1/RPMS/hylafax-4.1-0.10m dk.i586.rpm


• MandrakeSoft 1.0.1 hylafax-client-4.1-0.10mdk.i586.rpm
  ftp://ftp.vlug.org/dists/mandrake/updates/1.0.1/RPMS/hylafax-client-4. 1-0.10mdk.i586.rpm


• MandrakeSoft 1.0.1 hylafax-server-4-0.10mdk.i586.rpm
  ftp://ftp.vlug.org/dists/mandrake/updates/1.0.1/RPMS/hylafax-server-4- 0.10mdk.i586.rpm


• MandrakeSoft 7.1 hylafax-4.1-0.10mdk.i586.rpm
  ftp://ftp.vlug.org/dists/mandrake/updates/7.1/RPMS/hylafax-4.1-0.10mdk .i586.rpm


• MandrakeSoft 7.1 hylafax-client-4.1-0.10mdk.i586.rpm
  ftp://ftp.vlug.org/dists/mandrake/updates/7.1/RPMS/hylafax-client-4.1- 0.10mdk.i586.rpm


• MandrakeSoft 7.1 hylafax-server-4.1-0.10mdk.i586.rpm
  ftp://ftp.vlug.org/dists/mandrake/updates/7.1/RPMS/hylafax-server-4.1- 0.10mdk.i586.rpm


• MandrakeSoft 7.2 hylafax-4.1-0.9mdk.i586.rpm
  ftp://ftp.vlug.org/dists/mandrake/updates/7.2/RPMS/hylafax-4.1-0.9mdk. i586.rpm


• MandrakeSoft 7.2 hylafax-client-4.1-0.9mdk.i586.rpm
  ftp://ftp.vlug.org/dists/mandrake/updates/7.2/RPMS/hylafax-client-4.1- 0.9mdk.i586.rpm


• MandrakeSoft 7.2 hylafax-server-4.1-0.9mdk.i586.rpm
  ftp://ftp.vlug.org/dists/mandrake/updates/7.2/RPMS/hylafax-server-4.1- 0.9mdk.i586.rpm

Hylafax Hylafax 4.1 -beta3

• HylaFax hfaxd-vulnerability.patch
  http://www.hylafax.org/patches/hfaxd-vulnerability.patch