CVE-2006-1231: Julian Pawlowski CAPI4HYLAFAX

Low severity, CVSS 1.2. EPSS: 0.3% chance of exploitation in the next 30 days.

CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecv_dbgdatafile.sff temporary file.

Affected products

• Julian Pawlowski CAPI4HYLAFAX: version 1.3 only

Published 2006-03-14. Last modified 2026-06-16.