CVE-2005-3538
hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges.
Date published : 2006-01-06
http://www.securityfocus.com/bid/16150
http://www.securityfocus.com/archive/1/420974/100/0/threaded