FreePBX Security Threat: Unauthorized File Writing Permitted
|
Affected Products
All Xorcom IP-PBX models (XR1nnn, XR2nnn, XR3nnn, XE2nnn, XE3nnn) running Elastix 1.5 or 1.6
Problem
We have been informed by the Elastix development team that a security threat which would allow remote users to write files on the server's hard drive through FreePBX has been discovered.
This action involves two different security problems:
- the first problem allows access to the FreePBX “not embedded” interface with administrator privileges
- the second problem allows a user to write files on the file system, through the administrator FreePBX “not embedded” interface
Solution
The first threat was solved at the end of 2010. The solution to the second problem is being released today (for details see: http://elx.ec/secalert052011).
The update amends the problems mentioned above and is available at the Elastix update repository. The update can be executed through console by running the command "yum update freePBX" or from the Elastix updates Web interface.
Important Reminder
Under no circumstances should FreePBX be upgraded through the “not embedded” interface. The right way to do it is from the Elastix RPM packages. Updating FreePBX from the “not embedded” interface can overwrite important changes in RPM packages distributed with Elastix.
|
|
|
Last Updated ( Sunday, 15 May 2011 )
|
