Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2007-6424

Published: 18/12/2007 Updated: 14/02/2024
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Netfortris

Vulnerability Summary

registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote web site without sufficiently validating the origin of the commands, which allows remote malicious users to disable trixbox and execute arbitrary commands via a DNS spoofing attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

netfortris trixbox 2.0

References

CWE-264http://voipsa.org/pipermail/voipsec_voipsa.org/2007-December/002522.htmlhttp://www.superunknown.org/pivot/entry.php?id=15http://www.trixbox.org/forums/trixbox-forums/open-discussion/trixbox-phones-homehttp://voipsa.org/pipermail/voipsec_voipsa.org/2007-December/002533.htmlhttp://voipsa.org/blog/2007/12/17/trixbox-contains-phone-home-code-to-retrieve-arbitrary-commands-to-execute/http://osvdb.org/44136http://voipsa.org/pipermail/voipsec_voipsa.org/2007-December/002528.htmlhttps://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTICVE-2024-35863CVE-2024-35910man-in-the-middleCVE-2024-35912CVE-2024-25742LFICVE-2024-32002CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook