Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote web site without sufficiently validating the origin of the commands, which allows remote attackers to disable trixbox and execute arbitrary commands via a DNS spoofing attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Netfortris Fonality Trixbox 权限许可和访问控制问题漏洞
Vulnerability Description
Netfortris Fonality Trixbox是美国Netfortris公司的一套商业电话软件。 Netfortris Fonality Trixbox 存在权限许可和访问控制问题漏洞，当进入一个特定环境时，Fonality Trixbox 2.0 PBX产品中的registry.pl从没有充足命令源的远程网点读取并执行一系列命令。远程攻击者可以借助一个DNS进行欺骗性攻击使trixbox失效并执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A