Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2019-1011

Высокий

ALT-PU-2019-1011: package freeswitch update to version 1.8.4-alt1

Источник
errata.altlinux.org
Дата публикации
08.01.2019
Дата обновления
08.01.2019
Устраненные уязвимости
1
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades freeswitch to version 1.8.4-alt1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2019-1011https://errata.altlinux.org/ALT-PU-2019-1011

Связанные уязвимости

nvd логотип

CVE-2018-19911

CVSS3: 7.5
nvd
почти 8 лет назад

FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_system or txtapi/bg_system) query string on TCP port 8080, as demonstrated by an api/system?calc URI. This can also be exploited via CSRF. Alternatively, the default password of works for the freeswitch account can sometimes be used.

debian логотип

CVE-2018-19911

CVSS3: 7.5
debian
почти 8 лет назад

FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote a ...

github логотип

GHSA-j9vc-vw64-7f9w

CVSS3: 7.5
github
больше 4 лет назад

FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_system or txtapi/bg_system) query string on TCP port 8080, as demonstrated by an api/system?calc URI. This can also be exploited via CSRF. Alternatively, the default password of works for the freeswitch account can sometimes be used.