Vulnerability Bulletins |
Ejecución de comandos arbitrarios en Capi4hylafax |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio exotico |
System information |
|
| Property | Value |
| Affected manufacturer | GNU/Linux |
| Affected software | capi4hylafax |
Description |
|
|
Se ha descubierto una vulnerabilidad en capi4hylafax. La vulnerabilidad reside en un error desconocido relacionado con la validación de la entrada. Un atacante remoto podría ejecutar comandos arbitrarios en el sistema de recepción de fax. |
|
Solution |
|
|
Actualización de software Debian Debian Linux 3.1 Source http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2.dsc http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2.diff.gz http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03.orig.tar.gz Alpha http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2_alpha.deb AMD64 http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2_amd64.deb ARM http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2_arm.deb Intel IA-32 http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2_i386.deb Intel IA-64 http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2_ia64.deb Motorola 680x0 http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2_m68k.deb PowerPC http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2_powerpc.deb Sun Sparc http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylafax_01.02.03-10sarge2_sparc.deb |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2006-3126 |
| BID | |
Other resources |
|
|
Debian Security Advisory (DSA 1165-1) http://lists.debian.org/debian-security-announce/debian-security-announce-2006/msg00255.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2006-09-04 |