Package name
hylafax
Date
2002-08-28
Advisory ID
MDKSA-2002:055
Affected versions
8.1 i586 , CS1.0 i586 , 8.1 i586 , 8.0 i586 , 8.2 i586 , 8.0 i586 , 8.2 i586 , 7.1 i586 , 7.2 i586

Problem description

Numerous vulnerabilities in the HylaFAX product exist in versions prior to 4.1.3. It does not check the TSI string which is received from remote FAX systems before using it in logging and other places. A remote sender using a specially formatted TSI string can cause the faxgetty program to segfault, resulting in a denial of service. Format string vulnerabilities were also discovered by Christer Oberg, which exist in a number of utilities bundled with HylaFax, such as faxrm, faxalter, faxstat, sendfax, sendpage, and faxwatch. If any of these tools are setuid, they could be used to elevate system privileges. Mandrake Linux does not, by default, install these tools setuid. Finally, Lee Howard discovered that faxgetty would segfault due to a buffer overflow after receiving a very large line of image data. This vulnerability could conceivably be used to execute arbitrary commands on the system as root, and could also be exploited more easily as a denial of sevice.

Updated packages

8.1 i586

 07a96e577b97485a6d723743196ad248  ia64/8.1/RPMS/hylafax-4.1.3-1.1mdk.ia64.rpm
1d2ee7c691e72978ea49c0eec3c945b4  ia64/8.1/RPMS/hylafax-client-4.1.3-1.1mdk.ia64.rpm
248d6879e45952ae2c9494e91297b0b6  ia64/8.1/RPMS/hylafax-server-4.1.3-1.1mdk.ia64.rpm
3f48d8f2283917f3b451dcaf9deb3edf  ia64/8.1/RPMS/libhylafax4.1.1-4.1.3-1.1mdk.ia64.rpm
16dee4b27fc1fc63ccd377e1340d371c  ia64/8.1/RPMS/libhylafax4.1.1-devel-4.1.3-1.1mdk.ia64.rpm
ff2a96e07f08a70a8f0d9b734a37c122  ia64/8.1/SRPMS/hylafax-4.1.3-1.1mdk.src.rpm

CS1.0 i586

 1bbb83c824d07e017a36c2c85b92c3b7  1.0.1/RPMS/hylafax-4.1-0.11mdk.i586.rpm
3f4e469a6c57529fe02025ea7b4bef45  1.0.1/RPMS/hylafax-client-4.1-0.11mdk.i586.rpm
9b0952a5701bc2ffaa6068b4b0901ede  1.0.1/RPMS/hylafax-server-4.1-0.11mdk.i586.rpm
c44d130f10049d79f7a60601b9844b6e  1.0.1/SRPMS/hylafax-4.1-0.11mdk.src.rpm

8.1 i586

 1947a6895cdfe3c4bda4fc100b3c1276  8.1/RPMS/hylafax-4.1.3-1.1mdk.i586.rpm
13fcd879330de0cb58bc8c8c99595291  8.1/RPMS/hylafax-client-4.1.3-1.1mdk.i586.rpm
2450c7ec306a4e5c9e6a73d8d09bafc6  8.1/RPMS/hylafax-server-4.1.3-1.1mdk.i586.rpm
862d14c12e65ee9f82451ad911bc8df7  8.1/RPMS/libhylafax4.1.1-4.1.3-1.1mdk.i586.rpm
f5b5c5a4b3137277793adf385ffba962  8.1/RPMS/libhylafax4.1.1-devel-4.1.3-1.1mdk.i586.rpm
ff2a96e07f08a70a8f0d9b734a37c122  8.1/SRPMS/hylafax-4.1.3-1.1mdk.src.rpm

8.0 i586

 a3676fb894765134d5669f914e39f10c  8.0/RPMS/hylafax-4.1.3-1.1mdk.i586.rpm
27c72f3ad72e85abc4c527fa44d625e9  8.0/RPMS/hylafax-client-4.1.3-1.1mdk.i586.rpm
b1effc6accf5c808694ee312abf08140  8.0/RPMS/hylafax-server-4.1.3-1.1mdk.i586.rpm
070d143881cf21632484fcd65fad1aa0  8.0/RPMS/libhylafax4.1.1-4.1.3-1.1mdk.i586.rpm
a4f1487efa5cc026103d80c96dd41a43  8.0/RPMS/libhylafax4.1.1-devel-4.1.3-1.1mdk.i586.rpm
ff2a96e07f08a70a8f0d9b734a37c122  8.0/SRPMS/hylafax-4.1.3-1.1mdk.src.rpm

8.2 i586

 e3c962f212ba5faf2bbbf9bbe97ac39b  8.2/RPMS/hylafax-4.1.3-1.1mdk.i586.rpm
27d3a86f8bd39560468fdc5b9be66269  8.2/RPMS/hylafax-client-4.1.3-1.1mdk.i586.rpm
60f4529da79fcc543502d650a2782178  8.2/RPMS/hylafax-server-4.1.3-1.1mdk.i586.rpm
0f2044dfb51f6b086f0620965f810da3  8.2/RPMS/libhylafax4.1.1-4.1.3-1.1mdk.i586.rpm
0542d8bd7f1f98784af674c107ede594  8.2/RPMS/libhylafax4.1.1-devel-4.1.3-1.1mdk.i586.rpm
ff2a96e07f08a70a8f0d9b734a37c122  8.2/SRPMS/hylafax-4.1.3-1.1mdk.src.rpm

8.0 i586

 e51efc370f2bb4af971457edd5dda1e9  ppc/8.0/RPMS/hylafax-4.1.3-1.1mdk.ppc.rpm
3b15cb44ed18c353c154e7d97fecc4ba  ppc/8.0/RPMS/hylafax-client-4.1.3-1.1mdk.ppc.rpm
73af1b321e30ed8d7740c1e8a0b60a67  ppc/8.0/RPMS/hylafax-server-4.1.3-1.1mdk.ppc.rpm
6225da0393fd8f80c2dfebd85df5998e  ppc/8.0/RPMS/libhylafax4.1.1-4.1.3-1.1mdk.ppc.rpm
eac3efd3d7c5184312bd4aa793a8a8e7  ppc/8.0/RPMS/libhylafax4.1.1-devel-4.1.3-1.1mdk.ppc.rpm
ff2a96e07f08a70a8f0d9b734a37c122  ppc/8.0/SRPMS/hylafax-4.1.3-1.1mdk.src.rpm

8.2 i586

 72c6a45d7a11fb1b69a3fd8ebb9b0fc8  ppc/8.2/RPMS/hylafax-4.1.3-1.1mdk.ppc.rpm
a26c8f863ac3b71ebea178e3a946b173  ppc/8.2/RPMS/hylafax-client-4.1.3-1.1mdk.ppc.rpm
16bab89e373b104b3cbe910e103297e8  ppc/8.2/RPMS/hylafax-server-4.1.3-1.1mdk.ppc.rpm
a2fe9322f593f6d56f319c439e4a952d  ppc/8.2/RPMS/libhylafax4.1.1-4.1.3-1.1mdk.ppc.rpm
2d60a7ab5d1b41b85511f3302a5044de  ppc/8.2/RPMS/libhylafax4.1.1-devel-4.1.3-1.1mdk.ppc.rpm
ff2a96e07f08a70a8f0d9b734a37c122  ppc/8.2/SRPMS/hylafax-4.1.3-1.1mdk.src.rpm

7.1 i586

 1bbb83c824d07e017a36c2c85b92c3b7  7.1/RPMS/hylafax-4.1-0.11mdk.i586.rpm
3f4e469a6c57529fe02025ea7b4bef45  7.1/RPMS/hylafax-client-4.1-0.11mdk.i586.rpm
9b0952a5701bc2ffaa6068b4b0901ede  7.1/RPMS/hylafax-server-4.1-0.11mdk.i586.rpm
c44d130f10049d79f7a60601b9844b6e  7.1/SRPMS/hylafax-4.1-0.11mdk.src.rpm

7.2 i586

 37c7c3efa774714204c22e6bde81f432  7.2/RPMS/hylafax-4.1-0.11mdk.i586.rpm
37cb7b798ffaf93aba0782b4fb760a39  7.2/RPMS/hylafax-client-4.1-0.11mdk.i586.rpm
b28df42826dc9a833c7f19ad92dacbec  7.2/RPMS/hylafax-server-4.1-0.11mdk.i586.rpm
c44d130f10049d79f7a60601b9844b6e  7.2/SRPMS/hylafax-4.1-0.11mdk.src.rpm

References