CVE
- Id
- 3205
- CVE No.
- CVE-2001-0387
- Status
- Entry
- Description
- Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.
- Phase
- Votes
- Comments
-
- History
- Session
-
Request +
Request
Cake Params
- plugin(null)
- controllercveinfos
- actionview
- named(empty)
- pass(array)
- 03205
Post data
No post data.
Query string
No querystring data.
Cookie
To view Cookies, add CookieComponent to Controller
Current Route
- keys(array)
- 0controller
- 1action
- options(array)
- defaultRoute(true)
- defaults(array)
- plugin(null)
- template/:controller/:action/*
==== - Sql Log
-
Timer +
Memory
Peak Memory Use 3.87 MB
Message Memory use Component initialization 1.39 MB Controller action start 1.49 MB Controller render start 2.26 MB View render complete 2.68 MB Timers
Total Request Time: 520 (ms)
Message Time in ms Graph Core Processing (Derived from $_SERVER["REQUEST_TIME"]) 2.74 Event: Controller.initialize 0.02 Event: Controller.startup 0.06 Controller action 499.07 Event: Controller.beforeRender 5.06 » Processing toolbar data 4.97 Rendering View 7.16 » Event: View.beforeRender 0.02 » Rendering APP/View/Cveinfos/view.ctp 6.03 » Event: View.afterRender 0.02 » Event: View.beforeLayout 0.02 » Rendering APP/View/Layouts/default.ctp 0.60 » » Rendering CORE/Cake/View/Elements/sql_dump.ctp 0.09 Event: View.afterLayout 0.00 ==== - Log
-
Variables +
View Variables
- cveinfo(array)
- Cveinfo(array)
- id3205
- nameCVE-2001-0387
- statusEntry
- descriptionFormat string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.
- phase(null)
- votes(null)
- comments(null)
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- Cveref(array)
- 0(array)
- id13445
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceBUGTRAQ:20010412 HylaFAX vulnerability
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 1(array)
- id13446
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceURL:http://www.securityfocus.com/archive/1/175963
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 2(array)
- id13447
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceBUGTRAQ:20010415 **SECURITY ADVISORY** - HylaFAX format string vulnerability
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 3(array)
- id13448
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceURL:http://archives.neohapsis.com/archives/bugtraq/2001-04/0236.html
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 4(array)
- id13449
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceFREEBSD:FreeBSD-SA-01:34
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 5(array)
- id13450
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceURL:http://archives.neohapsis.com/archives/freebsd/2001-04/0606.html
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 6(array)
- id13451
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceSUSE:SuSE-SA:2001:15
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 7(array)
- id13452
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceURL:http://lists.suse.com/archives/suse-security-announce/2001-Apr/0005.html
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 8(array)
- id13453
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceMANDRAKE:MDKSA-2001:041
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 9(array)
- id13454
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceURL:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-041.php3
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 10(array)
- id13455
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceBID:2574
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 11(array)
- id13456
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceURL:http://www.securityfocus.com/bid/2574
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 12(array)
- id13457
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceXF:hylafax-hfaxd-format-string(6377)
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 13(array)
- id13458
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceURL:http://xforce.iss.net/static/6377.php
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 14(array)
- id13459
- cveinfo_id3205
- name(null)
- cveinfo_nameCVE-2001-0387
- referenceOSVDB:5679
- deleted(null)
- created0000-00-00 00:00:00
- modified0000-00-00 00:00:00
- 0(array)
- Jvninfo(empty)
- Cveinfo(array)
- $request->data(empty)
- $this->validationErrors(array)
- Cveinfo(empty)
- Cveref(empty)
- Jvninfo(empty)
- Loaded Helpers(array)
- 0Number
- 1SimpleGraph
- 2DebugTimer
- 3Toolbar
- 4Html
- 5Form
- 6Text
- 7Session
- 8HtmlToolbar
==== - cveinfo(array)
-
Environment +
App Constants
No application environment available.CakePHP Constants
Constant Value APP /virtual/inogo77/public_html/jvn/app/ APP_DIR app APPLIBS /virtual/inogo77/public_html/jvn/app/Lib/ CACHE /virtual/inogo77/public_html/jvn/app/tmp/cache/ CAKE /virtual/inogo77/public_html/jvn/lib/Cake/ CAKE_CORE_INCLUDE_PATH /virtual/inogo77/public_html/jvn/lib CORE_PATH /virtual/inogo77/public_html/jvn/lib/ CAKE_VERSION 2.6.0 CSS /virtual/inogo77/public_html/jvn/app/webroot/css/ CSS_URL css/ DS / FULL_BASE_URL http://inogo77.s500.xrea.com IMAGES /virtual/inogo77/public_html/jvn/app/webroot/img/ IMAGES_URL img/ JS /virtual/inogo77/public_html/jvn/app/webroot/js/ JS_URL js/ LOGS /virtual/inogo77/public_html/jvn/app/tmp/logs/ ROOT /virtual/inogo77/public_html/jvn TESTS /virtual/inogo77/public_html/jvn/app/Test/ TMP /virtual/inogo77/public_html/jvn/app/tmp/ VENDORS /virtual/inogo77/public_html/jvn/vendors/ WEBROOT_DIR webroot WWW_ROOT /virtual/inogo77/public_html/jvn/app/webroot/ PHP Environment
Environment Variable Value Php Version 5.6.40 Phprc php56.ini Php Fcgi Children 1 Pwd /virtual/inogo77/public_html/.fast-cgi-bin Php Fcgi Max Requests 10000 Shlvl 0 Path /usr/local/bin:/usr/bin:/bin Http Connection close Script Name /jvn/app/webroot/index.php Request Uri /jvn/cveinfos/view/3205 Query String Request Method GET Server Protocol HTTP/1.1 Gateway Interface CGI/1.1 Redirect Url /jvn/app/webroot/cveinfos/view/3205 Remote Port 28947 Script Filename /virtual/inogo77/public_html/jvn/app/webroot/index.php Server Admin [no address given] Context Document Root /virtual/inogo77/public_html Context Prefix Request Scheme http Document Root /virtual/inogo77/public_html Remote Addr 3.140.195.190 Server Port 80 Server Addr 160.251.151.205 Server Name inogo77.s500.xrea.com Server Software Apache Server Signature Http Host inogo77.s500.xrea.com Http Accept Encoding gzip, br, zstd, deflate Http User Agent Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Http Accept */* Gem Home /usr/local/rvm/gems/ruby-2.3.0 Suspectharddos 1 Suspectdos 1 X Dostranslated Ip 3.140.195.190 Mm Country Code US Mmdb Info result found Mmdb Addr 3.140.195.190 Unique Id aCVZb_RoHmsg9-KesvVyrQAAAJ4 Redirect Status 200 Redirect Gem Home /usr/local/rvm/gems/ruby-2.3.0 Redirect Suspectharddos 1 Redirect Suspectdos 1 Redirect X Dostranslated Ip 3.140.195.190 Redirect Mm Country Code US Redirect Mmdb Info result found Redirect Mmdb Addr 3.140.195.190 Redirect Unique Id aCVZb_RoHmsg9-KesvVyrQAAAJ4 Redirect Redirect Status 200 Redirect Redirect Gem Home /usr/local/rvm/gems/ruby-2.3.0 Redirect Redirect Suspectharddos 1 Redirect Redirect Suspectdos 1 Redirect Redirect X Dostranslated Ip 3.140.195.190 Redirect Redirect Mm Country Code US Redirect Redirect Mmdb Info result found Redirect Redirect Mmdb Addr 3.140.195.190 Redirect Redirect Unique Id aCVZb_RoHmsg9-KesvVyrQAAAJ4 Fcgi Role RESPONDER Php Self /jvn/app/webroot/index.php Request Time Float 1747278191.9353 Request Time 1747278191 ==== -
Include +
Included Files
Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
- Cache(array)
- 0CORE/Cache/Cache.php
- 1CORE/Cache/Engine/FileEngine.php
- 2CORE/Cache/CacheEngine.php
- Component(array)
- 0CORE/Controller/Component/SessionComponent.php
- Config(array)
- 0CORE/Config/routes.php
- 1CORE/Config/config.php
- Controller(array)
- 0CORE/Controller/Controller.php
- 1CORE/Controller/ComponentCollection.php
- 2CORE/Controller/Component.php
- Datasource(array)
- 0CORE/Model/Datasource/CakeSession.php
- 1CORE/Model/Datasource/Database/Mysql.php
- 2CORE/Model/Datasource/DboSource.php
- 3CORE/Model/Datasource/DataSource.php
- Error(array)
- 0CORE/Error/exceptions.php
- 1CORE/Error/ErrorHandler.php
- I18n(array)
- 0CORE/I18n/I18n.php
- 1CORE/I18n/L10n.php
- Log(array)
- 0CORE/Log/CakeLog.php
- 1CORE/Log/LogEngineCollection.php
- 2CORE/Log/Engine/FileLog.php
- 3CORE/Log/Engine/BaseLog.php
- 4CORE/Log/CakeLogInterface.php
- Model(array)
- 0CORE/Model/Model.php
- 1CORE/Model/BehaviorCollection.php
- 2CORE/Model/ConnectionManager.php
- Network(array)
- 0CORE/Network/CakeRequest.php
- 1CORE/Network/CakeResponse.php
- Other(array)
- 0CORE/bootstrap.php
- 1CORE/basics.php
- 2CORE/Core/App.php
- 3CORE/Core/Configure.php
- 4CORE/Core/CakePlugin.php
- 5CORE/Event/CakeEventListener.php
- 6CORE/Event/CakeEvent.php
- 7CORE/Event/CakeEventManager.php
- 8CORE/Core/Object.php
- Routing(array)
- 0CORE/Routing/Dispatcher.php
- 1CORE/Routing/Filter/AssetDispatcher.php
- 2CORE/Routing/DispatcherFilter.php
- 3CORE/Routing/Filter/CacheDispatcher.php
- 4CORE/Routing/Router.php
- 5CORE/Routing/Route/CakeRoute.php
- 6CORE/Routing/Route/PluginShortRoute.php
- Utility(array)
- 0CORE/Utility/Hash.php
- 1CORE/Utility/Inflector.php
- 2CORE/Utility/ObjectCollection.php
- 3CORE/Utility/Debugger.php
- 4CORE/Utility/String.php
- 5CORE/Utility/ClassRegistry.php
- View(array)
- 0CORE/View/HelperCollection.php
- Cache(array)
- app(array)
- Component(array)
- 0APP/Controller/Component/CommonComponent.php
- Config(array)
- 0APP/Config/core.php
- 1APP/Config/bootstrap.php
- 2APP/Config/routes.php
- 3APP/Config/database.php
- Controller(array)
- 0APP/Controller/CveinfosController.php
- 1APP/Controller/AppController.php
- Model(array)
- 0APP/Model/Cveinfo.php
- 1APP/Model/AppModel.php
- 2APP/Model/Cveref.php
- 3APP/Model/Jvninfo.php
- Other(array)
- 0APP/webroot/index.php
- Component(array)
- plugins(array)
- DebugKit(array)
- Component(array)
- 0DebugKit/Controller/Component/ToolbarComponent.php
- Other(array)
- 0DebugKit/Lib/DebugMemory.php
- 1DebugKit/Lib/Panel/HistoryPanel.php
- 2DebugKit/Lib/DebugPanel.php
- 3DebugKit/Lib/Panel/SessionPanel.php
- 4DebugKit/Lib/Panel/RequestPanel.php
- 5DebugKit/Lib/Panel/SqlLogPanel.php
- 6DebugKit/Lib/Panel/TimerPanel.php
- 7DebugKit/Lib/Panel/LogPanel.php
- 8DebugKit/Lib/Panel/VariablesPanel.php
- 9DebugKit/Lib/Panel/EnvironmentPanel.php
- 10DebugKit/Lib/Panel/IncludePanel.php
- 11DebugKit/Lib/DebugTimer.php
- Log(array)
- 0DebugKit/Lib/Log/Engine/DebugKitLog.php
- Component(array)
- DebugKit(array)
====