GLSA-200610-05 : CAPI4Hylafax fax receiver: Execution of arbitrary code

high Nessus Plugin ID 22891

Synopsis

The remote Gentoo host is missing one or more security-related patches.

Description

The remote host is affected by the vulnerability described in GLSA-200610-05 (CAPI4Hylafax fax receiver: Execution of arbitrary code)

Lionel Elie Mamane discovered an error in c2faxrecv, which doesn't properly sanitize TSI strings when handling incoming calls.
Impact :

A remote attacker can send null (\\0) and shell metacharacters in the TSI string from an anonymous fax number, leading to the execution of arbitrary code with the rights of the user running c2faxrecv.
Workaround :

There is no known workaround at this time.

Solution

All CAPI4Hylafax users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-misc/capi4hylafax-01.03.00.99.300.3-r1'

Plugin Details

Severity: High

ID: 22891

File Name: gentoo_GLSA-200610-05.nasl

Version: 1.15

Type: local

Family: Gentoo Local Security Checks

Published: 10/20/2006

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.5

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:gentoo:linux:capi4hylafax, cpe:/o:gentoo:linux

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Exploit Ease: No known exploits are available

Patch Publication Date: 10/17/2006

Vulnerability Publication Date: 8/11/2006

Reference Information

CVE: CVE-2006-3126

BID: 19801

GLSA: 200610-05

Detections

Analytics