Описание
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z (aka postrotate-command) option to tcpdump can be unsafe when used in conjunction with sudo.
Ссылки
- Third Party Advisory
- ExploitThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:3cx:phone_system_firmware:16.0.0.1570:*:*:*:*:*:*:*
cpe:2.3:h:3cx:phone_system:-:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.00324
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-269
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z (aka postrotate-command) option to tcpdump can be unsafe when used in conjunction with sudo.
EPSS
Процентиль: 55%
0.00324
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-269