13 matches found
AsteriDex <= 3.0 - Remote (callboth.php) Remote Code Execution Exploit
No description provided by source. Begin exploit !/bin/bash echo Asteridex PoC Exploit callboth.php vulnerability echo By Carl Livitt / Hoku Security / June 2007 echo This has to be a a valid SIP address, and b must answer when dialled. The exploit will fail without these conditions being met...
AsteriDex CallBoth.PHP远程命令执行漏洞
BUGTRAQ ID: 24781 CNCAN ID:CNCAN-2007070907 AsteriDex是一款基于WEB的自动拨号应用程序。 AsteriDex不正确处理用户提交的输入，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题存在于'callboth.php'脚本中，由于对IN和OUT变量缺少过滤，通过在$IN中包含CRLF字符，攻击者可以注入任意命令到数据留，劫持验证会话运行攻击者指定的命令。 AsteriDex AsteriDex 3.0 升级程序： AsteriDex AsteriDex 3.0 AsteriDex asteridex31.zip...
Crlf injection
Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the 1 IN and 2 OUT parameters...
CVE-2007-3621
Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the 1 IN and 2 OUT parameters...
CVE-2007-3621
CVE-2007-3621 involves multiple CRLF injection flaws in the AsteriDex 3.0 and earlier versions, exploitable through the callboth.php IN/OUT parameters to potentially execute arbitrary shell commands on the remote host. The vulnerability stems from inadequate input sanitization before relaying dat...
CVE-2007-3621
Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the 1 IN and 2 OUT parameters...
asteridex-exec.txt
Hoku Security Vulnerability Advisory Title: AsteriDex remote command execution Vendor URL: http://bestof.nerdvittles.com/applications/asteridex/ Type: Command injection / remote code execution Vulnerable versions: = 3.0 Risk factor: High Popularity: Low Author: Carl Livitt Contact: [email protected]...
AsteriDex callboth.php Multiple Parameter CRLF Injection Arbitrary Command Execution
The remote host is running AsteriDex, a web-based dialer and address book for Asterisk. The version of AsteriDex installed on the remote host fails to sanitize input to the 'IN' parameter of the 'callboth.php' script before passing it to the Asterisk Call Manager as part of the data stream of an...
AsteriDex (Asterisk / Trixbox) remote code execution
Hoku Security Vulnerability Advisory Title: AsteriDex remote command execution Vendor URL: http://bestof.nerdvittles.com/applications/asteridex/ Type: Command injection / remote code execution Vulnerable versions: = 3.0 Risk factor: High Popularity: Low Author: Carl Livitt Contact: [email protected]...
AsteriDex 3.0 - callboth.php Remote Code Execution
AsteriDex 3.0 - callboth.php Remote Code Execution Begin exploit !/bin/bash echo Asteridex PoC Exploit callboth.php vulnerability echo By Carl Livitt / Hoku Security / June 2007 echo This has to be a a valid SIP address, and b must answer when dialled. The exploit will fail without these conditio...
AsteriDex <= 3.0 Remote (callboth.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ==================================================================== AsteriDex echo For example: $0 www.example.com:8080 exit 1 fi Insanity echo "- Exploiting host $1 - please wait" echo -n '+' Building shell script curl...
AsteriDex <= 3.0 Remote (callboth.php) Remote Code Execution Exploit
No description provided by source. Begin exploit !/bin/bash echo Asteridex PoC Exploit callboth.php vulnerability echo By Carl Livitt / Hoku Security / June 2007 echo This has to be a a valid SIP address, and b must answer when dialled. The exploit will fail without these conditions being met...
AsteriDex 3.0 - 'callboth.php' Remote Code Execution
Begin exploit !/bin/bash echo Asteridex PoC Exploit callboth.php vulnerability echo By Carl Livitt / Hoku Security / June 2007 echo This has to be a a valid SIP address, and b must answer when dialled. The exploit will fail without these conditions being met. Currently uses the Melonite SIP echo...