CVE-2014-1903
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.965 High
EPSS
Percentile
99.6%
admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restrict the set of functions accessible to the API handler, which allows remote attackers to execute arbitrary PHP code via the function and args parameters to admin/config.php.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| freepbx:freepbx | freepbx | eq | 2.10 |
| freepbx:freepbx | freepbx | eq | 2.11 |
| freepbx:freepbx | freepbx | eq | 2.12 |
| sangoma:freepbx | sangoma freepbx | eq | 2.9 |
References
archives.neohapsis.com/archives/fulldisclosure/2014-02/0097.html
archives.neohapsis.com/archives/fulldisclosure/2014-02/0111.html
code.freepbx.org/changelog/FreePBX_Framework?cs=a29382efeb293ef4f42aa9b841dfc8eabb2d1e03
code.freepbx.org/changelog/FreePBX_SVN?cs=16429
issues.freepbx.org/browse/FREEPBX-7117
issues.freepbx.org/browse/FREEPBX-7123
osvdb.org/103240
packetstormsecurity.com/files/125166/FreePBX-2.x-Code-Execution.html
packetstormsecurity.com/files/125215/FreePBX-2.9-Remote-Code-Execution.html
www.freepbx.org/news/2014-02-06/security-vulnerability-notice
www.securityfocus.com/archive/1/531040/100/0/threaded
github.com/0x00string/oldays/blob/master/CVE-2014-1903.pl
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.965 High
EPSS
Percentile
99.6%