CVE-2006-6244

https://notcve.org/view.php?id=CVE-2006-6244

Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 allows attackers to execute arbitrary commands via shell metacharacters in (1) CALLERID(name) or (2) CALLERID(number). Coalescent Systems freePBX (anteriormente Asterisk Management Portal) anterior a 2.2.0rc1 permite a atacantes remotos ejecutar comandos de su elección mediante metacaracteres de línea de comandos en (1) CALLERID(nombre) o (2) CALLERID(número). • http://secunia.com/advisories/23124 http://sourceforge.net/project/shownotes.php?group_id=121515&release_id=467129 http://www.freepbx.org/trac/changeset/2076 http://www.securityfocus.com/bid/21359 http://www.vupen.com/english/advisories/2006/3019 •