CVE-2005-3538
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows...
CVE-2005-3538 is a high vulnerability (CVSS 7.5) in Ifax Solutions Hylafax, published December 31, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.48%, the 84th percentile. Fixed in hylafax 2:4.2.4-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.48%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2:4.2.4-1hylafax +2 more
Description
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.
- Record
CVE-2005-3538- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.
- Record
CVE-2005-3538- Updated
- 2026-11-02
EUVDEUVD-2005-3537No score
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.
- Record
EUVD-2005-3537- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-848f-7p2j-whwmNo score
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows...
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.
- Record
GHSA-848f-7p2j-whwm- Updated
- 2026-11-02
OSVNo score
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.
- Record
CVE-2005-3538- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3538No score
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.
- Record
DEBIAN-CVE-2005-3538- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/18314
hylafax.org/content/HylaFAX_4.2.4_release
gentoo.org/security/en/glsa/glsa-200601-03.xml
Show 8 moreShow less
securityfocus.com/archive/1/420974/100/0/threaded
bugs.hylafax.org/bugzilla/show_bug.cgi?id=719
vupen.com/english/advisories/2006/0072
mandriva.com/security/advisories?name=MDKSA-2006:015
nvd.nist.gov/vuln/detail/CVE-2005-3538
github.com/advisories/GHSA-848f-7p2j-whwm
security-tracker.debian.org/tracker/CVE-2005-3538