CVE-2013-5680 - Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child hang) or execute arbitrary code via a long USER command

Back Back to CVE browser

MEDIUM

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child hang) or execute arbitrary code via a long USER command

Published Apr 6, 2014

6.8

MEDIUM

CVSS 2.0

EPSS 7.89%

Description

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child hang) or execute arbitrary code via a long USER command.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (6)

http://hylafax.sourceforge.net/news/5.5.4.php
x_refsource_CONFIRMVendor Advisory
http://securitytracker.com/id?1029119
vdb-entryx_refsource_SECTRACK
http://www.exploit-db.com/exploits/28683
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/archive/1/528943
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/62729
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5517
Advisory

Link	Providers	Tags
http://hylafax.sourceforge.net/news/5.5.4.php		x_refsource_CONFIRMVendor Advisory
http://securitytracker.com/id?1029119		vdb-entryx_refsource_SECTRACK
http://www.exploit-db.com/exploits/28683		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/archive/1/528943		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/62729		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5517		Advisory