Command injection

2016-06-2001:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command execution by leveraging access to the nobody account.

CPENameOperatorVersion
fonalityeq12.8
fonalityeq12.6
fonalityeq14.1.105

Name	Operator	Version
fonality	eq	12.8
fonality	eq	12.6
fonality	eq	14.1.105

References

www.kb.cert.org/vuls/id/754056