CVE

CVE-2001-0387

Date: (C)2001-07-02   (M)2023-12-22

Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.2
Exploit Score: 3.9
Impact Score: 10.0
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

http://www.securityfocus.com/archive/1/175963

http://archives.neohapsis.com/archives/bugtraq/2001-04/0236.html

BID-2574

OSVDB-5679

FreeBSD-SA-01:34

MDKSA-2001:041

SuSE-SA:2001:15

hylafax-hfaxd-format-string(6377)