The remote host is missing an update to hylafax announced via advisory DSA 865-1. Javier Fernandez-Sanguino Pena discovered that several scripts of the hylafax suite, a flexible client/server fax software, create temporary files and directories in an insecure fashion, leaving them vulnerable to symlink exploits. For the old stable distribution (woody) this problem has been fixed in version 4.1.1-3.2.

For the stable distribution (sarge) this problem has been fixed in version 4.2.1-5sarge1. For the unstable distribution (sid) this problem has been fixed in version 4.2.2-1. We recommend that you upgrade your hylafax packages. https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20865-1