Hylafax多个脚本远程命令执行漏洞

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：

http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_4.1.1-4woody1_alpha.deb

ftp://ftp.hylafax.org/source/hylafax-4.2.4.tar.gz

http://wwwnew.mandriva.com/en/downloads/

http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_4.2.1-5sarge3_amd64.deb

http://security.debian.org/pool/updates/main/h/hylafax/hylafax-doc_4.2.1-5sarge3_all.deb

来源: BID

名称: 16151

链接:http://www.securityfocus.com/bid/16151

来源: GENTOO

名称: GLSA-200601-03

链接:http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml

来源: VUPEN

名称: ADV-2006-0072

链接:http://www.frsirt.com/english/advisories/2006/0072

来源: SECUNIA

名称: 18337

链接:http://secunia.com/advisories/18337

来源: SECUNIA

名称: 18314

链接:http://secunia.com/advisories/18314

来源: BUGTRAQ

名称: 20060105 HylaFAX Security advisory - fixed in HylaFAX 4.2.4

链接:http://www.securityfocus.com/archive/1/archive/1/420974/100/0/threaded

来源: www.hylafax.org

链接:http://www.hylafax.org/content/HylaFAX_4.2.4_release

来源: MISC

链接:http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719

来源: MANDRIVA

名称: MDKSA-2006:015

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:015

来源: DEBIAN

名称: DSA-933

链接:http://www.debian.org/security/2005/dsa-933

来源: SECUNIA

名称: 18489

链接:http://secunia.com/advisories/18489

来源: SECUNIA

名称: 18366

链接:http://secunia.com/advisories/18366

来源: MANDRIVA

名称: MDKSA-2006:015

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:015