How to Buy
This script is Copyright (C) 2014 Tenable Network Security, Inc.
The remote host contains an application that is affected by a
heap-based remote buffer overflow vulnerability.
According to its version number, the HylaFAX+ install hosted on the
remote web server is 5.2.4 or later and prior to 5.5.4. It is,
therefore, affected by a heap-based remote buffer overflow
The flaw exists when 'hfaxd' is compiled with support for LDAP. The
user input for LDAP authentication is not properly validated. This
could allow a remote attacker to cause a denial of service or execute
Note that Nessus has not tested for this issues but has instead
relied only on the application's self-reported version number.
See also :
Upgrade to version 5.5.4 or later.
Risk factor :
Medium / CVSS Base Score : 6.8
CVSS Temporal Score : 5.3
Public Exploit Available : true
Nessus Plugin ID: 76348 ()
Bugtraq ID: 62729
CVE ID: CVE-2013-5680
Upgrade to Nessus Professional today!
Start your free Nessus Cloud trial now!
Begin Free Trial
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.