CVE-2004-1182

CVE-2004-1182 describes an authentication bypass vulnerability in hfaxd within HylaFAX versions prior to 4.2.1. This flaw allows remote attackers to gain unauthorized access by crafting specific usernames or hostnames that satisfy weak regular expressions in the hosts.hfaxd configuration file, bypassing password requirements. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no known active exploitation, publicly available exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.