CVE-2019-9971

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump…

published June 7, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z (aka postrotate-command) option to tcpdump can be unsafe when used in conjunction with sudo.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01690 · 76.9th percentile
Published
2022-06-07T17:56Z
EPSS history
Timeline
  • 07 JUN 17:56Z
    PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump…
    cvelistv5