Re: hylafax

From: Przemyslaw Frasunek (venglinat_private)
Date: Sat Oct 13 2001 - 12:31:29 PDT

Next message: Matthew S. Hallacy: "Re: OpenProjects IRCD allows DNS spoofing"

Previous message: Francisco J. León: "Bug in PostNuke 0.62, 0.63 and 0.64 (and possibly PHPnuke)"
Next in thread: Lee Howard: "Re: hylafax"
Reply: Lee Howard: "Re: hylafax"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> There are some format strings vulnerbilities in the lastest hylafax
package
> try faxrm -h %x 1 or faxalter -h %x -D 1 for "proof of concept".

an exploit for this one:
http://www.frasunek.com/sources/security/security/hylafax.pl

--
* Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NIC-HDL: PMF9-RIPE *
* Inet: przemyslawat_private ** PGP: D48684904685DF43EA93AFA13BE170BF *

Next message: Matthew S. Hallacy: "Re: OpenProjects IRCD allows DNS spoofing"
Previous message: Francisco J. León: "Bug in PostNuke 0.62, 0.63 and 0.64 (and possibly PHPnuke)"
Next in thread: Lee Howard: "Re: hylafax"
Reply: Lee Howard: "Re: hylafax"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Oct 14 2001 - 18:10:29 PDT