CVE-2020-15397
Published Jun 30, 2020HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are…
Vendor archive
hylafax+_project CVEs
Beta · best-effort2 CVEs tagged to vendor hylafax+_project — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2020-15396
Published Jun 30, 2020In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escala…
Showing 1-2 of 2 CVEsPage 1 of 1