CVE-2019-9971 PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs beca...
HighCVSS 8.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z (aka postrotate-command) option to tcpdump can be unsafe when used in conjunction with sudo.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3cx phone system firmware | = 16.0.0.1570 | No fix listed |
| debian linux | All versions | No fix listed |
References
- www.gosecure.net third-party-advisory
- www.gosecure.net exploit third-party-advisory
- www.securusglobal.com third-party-advisory