efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.
| Software | From | Fixed in |
|---|---|---|
| efax / efax | 0.8a | 0.8a.x |
| efax / efax | 0.9a | 0.9a.x |
| efax / efax | 0.9 | 0.9.x |