CVE-1999-1340

hylafax 4.0.2 - Local Buffer Overflow via Long -m Argument

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-1340. PoCs published by Brock Tellier.

AI-analyzed exploit summary This exploit targets a buffer overflow in Hylafax's 'faxalter' program (SUID UUCP) on FreeBSD 3.3/hylafax-4.0.2. It injects shellcode to gain UUCP privileges (euid=66), which can be leveraged to escalate to root by trojaning UUCP-writable binaries.

Description

Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Brock Tellier · clocalunix

https://www.exploit-db.com/exploits/19590

View Code ZIP pw:eip

This exploit targets a buffer overflow in Hylafax's 'faxalter' program (SUID UUCP) on FreeBSD 3.3/hylafax-4.0.2. It injects shellcode to gain UUCP privileges (euid=66), which can be leveraged to escalate to root by trojaning UUCP-writable binaries.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Hylafax 4.0.2 (faxalter) on FreeBSD 3.3

No auth needed

Prerequisites: Hylafax 4.0.2 with vulnerable 'faxalter' binary installed SUID UUCP · FreeBSD 3.3 environment

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=94173799532589&w=2

Exploit, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/765

Scores

EPSS 0.0091

EPSS Percentile 55.2%

Details

Status published

Products (1)

hylafax/hylafax 4.0.2

Published Nov 04, 1999

Tracked Since Feb 18, 2026