Fonality Arbitrary Command Execution Vulnerability

Fonality is an open source telephone switch solution with integrated VoIP and CRM features. A security vulnerability in Fonality's assignment of incorrect permissions to /var/www/rpc/surun scripts allows remote attackers to execute arbitrary commands with root privileges...