Vulnerability Details CVE-2002-1049
Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 80.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html
- http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300
- http://www.debian.org/security/2002/dsa-148
- http://www.iss.net/security_center/static/9728.php
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055
- http://www.novell.com/linux/security/advisories/2002_035_hylafax.html
- http://www.osvdb.org/5002
- http://www.securityfocus.com/bid/5348
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html
- http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300
- http://www.debian.org/security/2002/dsa-148
- http://www.iss.net/security_center/static/9728.php
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055
- http://www.novell.com/linux/security/advisories/2002_035_hylafax.html
- http://www.osvdb.org/5002
- http://www.securityfocus.com/bid/5348
Products affected by CVE-2002-1049
-
cpe:2.3:a:hylafax:hylafax:4.0.2
-
cpe:2.3:a:hylafax:hylafax:4.0_pl0
-
cpe:2.3:a:hylafax:hylafax:4.0_pl1
-
cpe:2.3:a:hylafax:hylafax:4.0_pl2
-
cpe:2.3:a:hylafax:hylafax:4.1
-
cpe:2.3:a:hylafax:hylafax:4.1.1
-
cpe:2.3:a:hylafax:hylafax:4.1.2
-
cpe:2.3:a:hylafax:hylafax:4.1_beta1
-
cpe:2.3:a:hylafax:hylafax:4.1_beta2
-
cpe:2.3:a:hylafax:hylafax:4.1_beta3