Skip to content

CVE-2001-1034

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code...

7.2 HighFix available

CVE-2001-1034 is a high vulnerability (CVSS 7.2) in Freebsd, published September 23, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in hylafax 4.1.2-2.1.

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.

Exploit likelihood

0.47%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.

Record: CVE-2001-1034
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.

Record: CVE-2001-1034
Updated: 2026-11-02

EUVDEUVD-2001-1015 No score

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.

Record: EUVD-2001-1015
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g7gq-5686-jw88 No score

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code...

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.

Record: GHSA-g7gq-5686-jw88
Updated: 2026-11-02

OSV No score

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.

Record: CVE-2001-1034
Updated: 2026-11-02

OSVDEBIAN-CVE-2001-1034 No score

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.

Record: DEBIAN-CVE-2001-1034
Updated: 2026-11-02

Affected products

freebsd

Affected packages

Affected packages
Package	Affected	Fixed
`hylafax` Debian:12	before 4.1.2-2.1	4.1.2-2.1
`hylafax` Debian:13	before 4.1.2-2.1	4.1.2-2.1
`hylafax` Debian:14	before 4.1.2-2.1	4.1.2-2.1
`hylafax` Debian:3.0	before 1:4.1.1-1.1	1:4.1.1-1.1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References