CVE-2002-1049

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html
http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300
http://www.debian.org/security/2002/dsa-148Patch, Vendor Advisory
http://www.iss.net/security_center/static/9728.phpPatch, Vendor Advisory
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055
http://www.novell.com/linux/security/advisories/2002_035_hylafax.html
http://www.osvdb.org/5002
http://www.securityfocus.com/bid/5348Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html
http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300
http://www.debian.org/security/2002/dsa-148Patch, Vendor Advisory
http://www.iss.net/security_center/static/9728.phpPatch, Vendor Advisory
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055
http://www.novell.com/linux/security/advisories/2002_035_hylafax.html
http://www.osvdb.org/5002
http://www.securityfocus.com/bid/5348Patch, Vendor Advisory

Timeline

Published: Oct 4, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-10507.5Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, CVE-2002-10514.6Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminat CVE-2002-10525.0Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using t CVE-2002-10536.8Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a U CVE-2002-10546.4Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directorie CVE-2002-10555.0Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long pa CVE-2002-10567.5Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editi CVE-2002-10577.5Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command.CVE-2002-105810.0Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the CVE-2002-10597.5Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via CVE-2002-10604.3Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.CVE-2002-10617.5Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of