FreePBX 'usersnum' Parameter Remote Command Execution Vulnerability

Bugtraq ID:	65756
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 23 2014 12:00AM
Updated:	Feb 23 2014 12:00AM
Credit:	i-Hmx
Vulnerable:	freePBX freePBX 2.10 freePBX freePBX 2.9 freePBX freePBX 2.5.2 freePBX freePBX 2.5.1 freePBX freePBX 2.4.1 freePBX freePBX 2.2.1 freePBX freePBX 2.9.0.14 freePBX freePBX 2.9 freePBX freePBX 2.8.0 freePBX freePBX 2.6 freePBX freePBX 2.5 freePBX freePBX 2.4 freePBX freePBX 2.11 freePBX freePBX 2.10.1.15 freePBX freePBX 2.10
Not Vulnerable:

FreePBX 'usersnum' Parameter Remote Command Execution Vulnerability

FreePBX is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize input data.

An attacker may leverage this issue to execute arbitrary commands in the context of the affected application.

FreePBX 2.x is vulnerable; other versions may also be affected.

FreePBX 'usersnum' Parameter Remote Command Execution Vulnerability

An attacker can exploit this issue using a web browser.

The following example data is available:

• /data/vulnerabilities/exploits/65756.txt

FreePBX 'usersnum' Parameter Remote Command Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

FreePBX 'usersnum' Parameter Remote Command Execution Vulnerability

References:

• Freepbx 2.x , Command Execution vuln (i-Hmx)
  
• freePBX Homepage (Coalescent Systems Inc.)