CVE

Id
46074  
CVE No.
CVE-2010-3490  
Status
Candidate  
Description
Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files via a .. (dot dot) in the usersnum parameter to admin/config.php, as demonstrated by creating a .php file under the web root.  
Phase
Assigned (20100923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
501106 46074 CVE-2010-3490 BUGTRAQ:20100923 TWSL2010-005: FreePBX recordings interface allows remote code execution  View
501107 46074 CVE-2010-3490 URL:http://www.securityfocus.com/archive/1/archive/1/513947/100/0/threaded  View
501108 46074 CVE-2010-3490 EXPLOIT-DB:15098  View
501109 46074 CVE-2010-3490 URL:http://www.exploit-db.com/exploits/15098  View
501110 46074 CVE-2010-3490 MISC:http://www.freepbx.org/trac/ticket/4553  View
501111 46074 CVE-2010-3490 MISC:https://www.trustwave.com/spiderlabs/advisories/TWSL2010-005.txt  View
501112 46074 CVE-2010-3490 BID:43454  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41702 JVNDB-2009-002709 pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性 pyftpdlib の ftpserver.py の FTPHandler クラスには、競合状態のため、サービス運用妨害 (デーモン停止) 状態となる脆弱性が存在します。 CVE-2010-3494 46074 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002709.html  View