CVE-2018-11551 AXON PBX DLL Loading Arbitrary Code Execution & Privilege Escalation Vulnerability
Himanshu Mehta <[email protected]> Wed, 30 May 2018 14:51:30 +0530
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.news.securitytracker,gmane.comp.security.bugtraq |
|---|---|
| Message-ID | <CAAYZd=nuD2oRANdnQf8kqhMdc22Qh22tykh6pOi4Kqdcmzm5nA@mail.gmail.com> |
QWxvaGEsCgoqU3VtbWFyeToqCkFYT04gUEJYIGNvbnRhaW5zIGEgRExMIGxvYWRpbmcgdnVsbmVy YWJpbGl0eSB0aGF0IGNvdWxkIGFsbG93IGFuCnVuYXV0aGVudGljYXRlZCwgcmVtb3RlIGF0dGFj a2VyIHRvIGV4ZWN1dGUgYXJiaXRyYXJ5IGNvZGUgb24gdGhlIHRhcmdldGVkCnN5c3RlbS4gVGhl IHZ1bG5lcmFiaWxpdHkgZXhpc3RzIGR1ZSB0byBzb21lIERMTCBmaWxlIGlzIGxvYWRlZCBieQon cGJ4c2V0dXAuZXhlJyBpbXByb3Blcmx5LiBBbmQgaXQgYWxsb3dzIGFuIGF0dGFja2VyIHRvIGxv YWQgdGhpcyBETEwgZmlsZQpvZiB0aGUgYXR0YWNrZXLigJlzIGNob29zaW5nIHRoYXQgY291bGQg ZXhlY3V0ZSBhcmJpdHJhcnkgY29kZSBhbmQgZ2FpbgplbGV2YXRlZCBwcml2aWxlZ2VzIHdpdGhv dXQgdGhlIHVzZXIncyBrbm93bGVkZ2UuCgoqQ1ZFIElEOiAqQ1ZFLTIwMTgtMTE1NTEKCipBZmZl Y3RlZCBQcm9kdWN0OiogQVhPTiBQQlggMi4wMiAocGJ4c2V0dXAuZXhlKQoKKlRlc3RlZCBvbjoq IFdpbmRvd3MgNyAoNjQtYml0KQoKKkltcGFjdDoqCkF0dGFja2VyIGNhbiBleHBsb2l0IHRoaXMg dnVsbmVyYWJpbGl0eSB0byBsb2FkIGEgRExMIGZpbGUgb2YgdGhlCmF0dGFja2VyJ3MgY2hvb3Np bmcgdGhhdCBjb3VsZCBleGVjdXRlIGFyYml0cmFyeSBjb2RlLiBUaGlzIG1heSBoZWxwCmF0dGFj a2VyIHRvIHN1Y2Nlc3NmdWxseSBleHBsb2l0IHRoZSBzeXN0ZW0gaWYgdXNlciBjcmVhdGVzIHNo ZWxsIGFzIGEgRExMLgoKKlZ1bG5lcmFiaWxpdHkgU2NvcmluZyBEZXRhaWxzOioKVGhlIHZ1bG5l cmFiaWxpdHkgY2xhc3NpZmljYXRpb24gaGFzIGJlZW4gcGVyZm9ybWVkIGJ5IHVzaW5nIHRoZSBD VlNTdjIKc2NvcmluZyBzeXN0ZW0gKGh0dHA6Ly93d3cuZmlyc3Qub3JnL2N2c3MvKS4KQmFzZSBT Y29yZTogNy4yIChBVjpBL0FDOkwvQXU6Ti9DOkMvSTpDL0E6QykKCipQcm9vZiBvZiBjb25jZXB0 L2RlbW9uc3RyYXRpb246KgoKMS4gQ3JlYXRlIGEgbWFsaWNpb3VzICdQUk9QU1lTLmRsbCcgZmls ZSBhbmQgc2F2ZSBpdCBpbiB5b3VyICJEb3dubG9hZHMiCmRpcmVjdG9yeS4KMi4gRG93bmxvYWQg J3BieHNldHVwLmV4ZScgZnJvbSBodHRwOi8vd3d3Lm5jaC5jb20uYXUvcGJ4LyBhbmQgc2F2ZSBp dCBpbgp5b3VyICJEb3dubG9hZHMiIGRpcmVjdG9yeS4KMy4gRXhlY3V0ZSBwYnhzZXR1cC5leGUg ZnJvbSB5b3VyICJEb3dubG9hZHMiIGRpcmVjdG9yeS4KNC4gTWFsaWNpb3VzIGRsbCBmaWxlIGdl dHMgZXhlY3V0ZWQuCgoqUmVmZXJlbmNlOioKaHR0cHM6Ly9jb21tdW5pdHkucmFwaWQ3LmNvbS9j b21tdW5pdHkvaW5mb3NlYy9ibG9nLzIwMTAvMDgvMjMvYXBwbGljYXRpb24tZGxsLWxvYWQtaGlq YWNraW5nCgoqQ3JlZGl0OioKSGltYW5zaHUgTWVodGEgKEBsaW9uaGVhcnRyb3h4KQoKQ2hhbyEh CkhpbWFuc2h1IE1laHRhCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXwpTZW50IHRocm91Z2ggdGhlIEZ1bGwgRGlzY2xvc3VyZSBtYWlsaW5nIGxpc3QKaHR0 cHM6Ly9ubWFwLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Z1bGxkaXNjbG9zdXJlCldlYiBBcmNoaXZl cyAmIFJTUzogaHR0cDovL3NlY2xpc3RzLm9yZy9mdWxsZGlzY2xvc3VyZS8=