Unrated severityNVD Advisory· Published Sep 6, 2006· Updated Jun 16, 2026
CVE-2006-3126
CVE-2006-3126
Description
c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:julian_pawlowski:capi4hylafax:01.02.03:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:julian_pawlowski:capi4hylafax:01.02.03:*:*:*:*:*:*:*
- (no CPE)range: <= 01.02.03
Patches
Vulnerability mechanics
References
9- bugs.debian.org/cgi-bin/bugreport.cginvdPatch
- secunia.com/advisories/21722nvdPatchVendor Advisory
- secunia.com/advisories/21726nvdPatchVendor Advisory
- secunia.com/advisories/22450nvd
- security.gentoo.org/glsa/glsa-200610-05.xmlnvd
- www.debian.org/security/2006/dsa-1165nvd
- www.novell.com/linux/security/advisories/2007_4_sr.htmlnvd
- www.securityfocus.com/bid/19801nvd
- www.vupen.com/english/advisories/2006/3430nvd
News mentions
0No linked articles in our index yet.