NVD

Id
58419  
Name
CVE-2007-6424  
Description
registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote web site without sufficiently validating the origin of the commands, which allows remote attackers to disable trixbox and execute arbitrary commands via a DNS spoofing attack.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-18  
Modified Date
2011-03-07  
Seq
2007-6424  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
299652 58419 CVE-2007-6424 http://voipsa.org/blog/2007/12/17/trixbox-contains-phone-home-code-to-retrieve-arbitrary-commands-to-execute/  View
299653 58419 CVE-2007-6424 [VOIPSEC] 20071216 Trixbox Arbitrary Command Execution Vulnerability  View
299654 58419 CVE-2007-6424 [VOIPSEC] 20071219 Trixbox Arbitrary Command Execution Vulnerability  View
299655 58419 CVE-2007-6424 [VOIPSEC] 20071219 trixbox vulnerability fluff  View
299656 58419 CVE-2007-6424 http://www.superunknown.org/pivot/entry.php?id=15  View
299657 58419 CVE-2007-6424 http://www.trixbox.org/forums/trixbox-forums/open-discussion/trixbox-phones-home  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54318 JVNDB-2007-003010 Fonality Trixbox PBX 製品の registry.pl における任意のコマンド実行される脆弱性 Fonality Trixbox PBX 製品の registry.pl は、特定の環境内で稼動している際、リモート Web サイトからの一連のコマンドを発行元を十分に検証をせず読み込みおよび実行するため、trixbox を無効にされる、および任意のコマンド実行される脆弱性が存在します。 CVE-2007-6424 29779 CVE-2007-6424 58419 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003010.html 2007-12-18 2012-06-26 View