CVE-2006-3126

Publication date 6 September 2006

Last updated 17 July 2025

Ubuntu priority

Description

c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
capi4hylafax	9.10 karmic	Fixed 01.03.00.99.svn.300-3
	9.04 jaunty	Fixed 01.03.00.99.svn.300-3
	8.10 intrepid	Fixed 01.03.00.99.svn.300-3
	8.04 LTS hardy	Fixed 01.03.00.99.svn.300-3
	7.10 gutsy	Fixed 01.03.00.99.svn.300-3
	7.04 feisty	Fixed 01.03.00.99.svn.300-3
	6.10 edgy	Fixed 01.03.00.99.svn.300-3
	6.06 LTS dapper	Ignored end of life

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2006-3126

CVE-2006-3126

Description

Status

References

Other references

Access our resources on patching vulnerabilities