CVE-2016-2363

2016-06-2001:00:00

certcc

www.cve.org

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command execution by leveraging access to the nobody account.

References

www.kb.cert.org/vuls/id/754056