Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

HylaFAX faxgetty can crash or be hijacked by long data

CVE-2002-1050 · published 24 years ago
Summary

The faxgetty component of HylaFAX versions before 4.1.3 can be overwhelmed by unusually long image lines, causing the service to stop working and possibly letting an attacker run their own code. This could interrupt fax operations and expose your system to further risk. Update HylaFAX to version 4.1.3 or later, or apply any available patches, and limit who can send faxes to your server.

What to do
  • Update debian hylafax to version 4.1.2-2.1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian hylafax < 4.1.2-2.1
Fix: upgrade to 4.1.2-2.1
Debian:13 debian hylafax < 4.1.2-2.1
Fix: upgrade to 4.1.2-2.1
Debian:14 debian hylafax < 4.1.2-2.1
Fix: upgrade to 4.1.2-2.1
– hylafax hylafax 4.0.2
4.0_pl0
4.0_pl1
4.0_pl2
4.1
4.1.1
4.1.2
4.1_beta1
4.1_beta2
4.1_beta3
cpe:2.3:a:hylafax:hylafax:4.0.2:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data.
Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data.
References
Severity
7.5 High
Exploitation
5% chance of attack within 30 days
Timeline
Published4 Oct 2002
Updated30 Oct 2026
First seen1 Sep 2026
Sources
DEBIAN-CVE-2002-1050 · OSV
CVE-2002-1050 · NVD
Track software like this
Free during beta