Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HylaFAX hfaxd未授权登录漏洞
Vulnerability Description
HylaFAX是一款企业级开放源代码收发传真软件。 HylaFAX在处理用户验证时存在问题，远程攻击者可以利用这个漏洞未授权登录，任意收发传真。 HylaFAX hfaxd使用hosts.hfaxd数据库验证用户，hosts.hfaxd第一个字段为"^username@hostname$"，其中"username"是hfaxd协议交换时提供的，"hostname"是主机名和点IP地址，表达式用于匹配用户名，主机名地址。 问题存在于匹配客户端字段提供的"username@hostname"字符串时，如果匹配
CVSS Information
N/A
Vulnerability Type
N/A