CVE-2013-5680 Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child hang) or execute arbitrary code vi...
MediumCVSS 6.8
EPSS 7.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child hang) or execute arbitrary code via a long USER command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lee howard hylafax+ | = 5.2.4 | No fix listed |
| lee howard hylafax+ | = 5.2.5 | No fix listed |
| lee howard hylafax+ | = 5.2.6 | No fix listed |
| lee howard hylafax+ | = 5.2.7 | No fix listed |
| lee howard hylafax+ | = 5.2.8 | No fix listed |
| lee howard hylafax+ | = 5.2.9 | No fix listed |
| lee howard hylafax+ | = 5.3.0 | No fix listed |
| lee howard hylafax+ | = 5.4.1 | No fix listed |
| lee howard hylafax+ | = 5.4.2 | No fix listed |
| lee howard hylafax+ | = 5.5.0 | No fix listed |
| lee howard hylafax+ | = 5.5.1 | No fix listed |
| lee howard hylafax+ | = 5.5.2 | No fix listed |
| lee howard hylafax+ | = 5.5.3 | No fix listed |
References
- Debian Security Tracker CVE-2013-5680 vendor-advisory
- hylafax.sourceforge.net vendor-advisory
- 1029119 vdb-entry
- 28683 exploit
- 20130930 CVE-2130-5680, HylaFAX+ heap overflow, unchecked network traffic. mailing-list
- 62729 vdb-entry