CVE-1999-1340: Buffer Overflow
Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Hylafax+ 4.0.2 (faxalter)from your environment.Uninstall the faxalter binary or the Hylafax+ 4.0.2 package if it is not required.
- Compensating control
Restrict local execution of the faxalter binary to trusted administrative accounts only (remove execute permission for unprivileged users, apply filesystem ACLs or sudo restrictions, and limit local user access) until a vendor-supplied fix is available.
- Operational
Monitor vendor advisories for Hylafax+ for a security patch or fixed release and apply the vendor-provided fix as soon as it is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1340?
CVE-1999-1340 has a high severity rating due to its potential for privilege escalation.
How do I fix CVE-1999-1340?
To fix CVE-1999-1340, update HylaFAX to a version later than 4.0.2 that does not have this vulnerability.
Who is affected by CVE-1999-1340?
Local users with access to the faxalter command in HylaFAX 4.0.2 are affected by CVE-1999-1340.
What causes CVE-1999-1340?
CVE-1999-1340 is caused by a buffer overflow due to improper handling of the -m command line argument in faxalter.
Is CVE-1999-1340 still a concern today?
While CVE-1999-1340 is an older vulnerability, it remains a concern for systems still running the affected version of HylaFAX.