CVE-2016-2363
Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access fo…
Published: 2016-06-20 · CVSS: Unscored
Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for the /var/www/rpc/surun script, which allows local users to obtain root access for unspecified command execution by leveraging access to the nobody account.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7