Test Kennung:	1.3.6.1.4.1.25623.1.0.52242
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: hylafax
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to the system as announced in the referenced advisory. The following package is affected: hylafax CVE-2004-1182 hfaxd in HylaFAX before 4.2.1, when installed with a 'weak' hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password. Solution: Update your system with the appropriate patches or software upgrades. http://marc.theaimsgroup.com/?l=bugtraq&m=110546971307585 http://www.vuxml.org/freebsd/8eabaad9-641f-11d9-92a7-000a95bc6fae.html CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1182 Bugtraq: 20050111 HylaFAX hfaxd unauthorized login vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110546971307585&w=2 Debian Security Information: DSA-634 (Google Search) http://www.debian.org/security/2004/dsa-634 http://security.gentoo.org/glsa/glsa-200501-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:006 http://marc.info/?l=hylafax&m=110545119911558&w=2 http://secunia.com/advisories/13812
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.