CVE-2005-3538

hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.

• http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719Patch
• http://secunia.com/advisories/18314Patch, Vendor Advisory
• http://secunia.com/advisories/18337Patch, Vendor Advisory
• http://secunia.com/advisories/18489
• http://www.gentoo.org/security/en/glsa/glsa-200601-03.xmlPatch
• http://www.hylafax.org/archive/2005-12/msg00119.php
• http://www.hylafax.org/content/HylaFAX_4.2.4_release
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:015
• http://www.securityfocus.com/archive/1/420974/100/0/threaded
• http://www.securityfocus.com/bid/16150Patch
• http://www.vupen.com/english/advisories/2006/0072
• http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719Patch
• http://secunia.com/advisories/18314Patch, Vendor Advisory
• http://secunia.com/advisories/18337Patch, Vendor Advisory
• http://secunia.com/advisories/18489
• http://www.gentoo.org/security/en/glsa/glsa-200601-03.xmlPatch
• http://www.hylafax.org/archive/2005-12/msg00119.php
• http://www.hylafax.org/content/HylaFAX_4.2.4_release
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:015
• http://www.securityfocus.com/archive/1/420974/100/0/threaded
• http://www.securityfocus.com/bid/16150Patch
• http://www.vupen.com/english/advisories/2006/0072

Published

Dec 31, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3532authpam.c in courier-authdaemon for Courier Mail Server 0.37…
• CVE-2005-3533Buffer overflow in OSH before 1.7-15 allows local users to e…
• CVE-2005-3534Buffer overflow in the Network Block Device (nbd) server 2.7…
• CVE-2005-3535Buffer overflow in KETM 0.0.6 allows local users to execute …
• CVE-2005-3536SQL injection vulnerability in phpBB 2 before 2.0.18 allows …
• CVE-2005-3537A "missing request validation" error in phpBB 2 before 2.0.1…
• CVE-2005-3539Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and…
• CVE-2005-3540Buffer overflow in petris before 1.0.1 allows remote attacke…
• CVE-2005-3542Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-3543SQL injection vulnerability in search.php in Phorum 5.0.0alp…
• CVE-2005-3544Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1…
• CVE-2005-3545SQL injection vulnerability in index.php of the report modul…