> There are some format strings vulnerbilities in the lastest hylafax package > try faxrm -h %x 1 or faxalter -h %x -D 1 for "proof of concept". an exploit for this one: http://www.frasunek.com/sources/security/security/hylafax.pl -- * Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NIC-HDL: PMF9-RIPE * * Inet: przemyslaw@frasunek.com ** PGP: D48684904685DF43EA93AFA13BE170BF *
