ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    FreePBX Vulnerability

    IT Discussion
    5
    12
    1.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      A Former User
      last edited by

      FYI There was a vulnerability discovered. http://community.freepbx.org/t/critical-freepbx-rce-vulnerability-all-versions/24536

      1 Reply Last reply Reply Quote 1
      • JaredBuschJ
        JaredBusch
        last edited by

        Another reason Elastix needs to be dropped. I loved the solution, but it is seriously falling off the map at this point.

        /me is pondering how hard it would be to migrate from Elastix to PBX in a Flash at this point.

        1 Reply Last reply Reply Quote 0
        • scottalanmillerS
          scottalanmiller
          last edited by

          For those unaware this is FreePBX the interface, not FreePBX the distro. So this impacts a ton of PBX systems including FreePBX, Elastix, scratch built, etc.

          1 Reply Last reply Reply Quote 0
          • Reid CooperR
            Reid Cooper
            last edited by

            Are Elastix and FreePBX ready to be patched?

            JaredBuschJ 1 Reply Last reply Reply Quote 0
            • JaredBuschJ
              JaredBusch @Reid Cooper
              last edited by

              @Reid-Cooper said:

              Are Elastix and FreePBX ready to be patched?

              FreePBX has been patched back to version 2.9

              Elastix uses version 2.8

              http://i.imgur.com/JZ7Zb5J.jpg

              1 Reply Last reply Reply Quote 0
              • NetworkNerdN
                NetworkNerd
                last edited by

                I have seen people in Spiceworks talk about doing a manual module upgrade from FreePBX 2.8 to 2.9 within Embedded FreePBX that can be accessed from an Elastix install but have never tried it.

                JaredBuschJ 1 Reply Last reply Reply Quote 0
                • JaredBuschJ
                  JaredBusch @NetworkNerd
                  last edited by

                  @NetworkNerd you can enable the beta repo and update to Elastix 2.5 which is FreePBX 2.11. But I won't do that for a production system..

                  Elastix 3.0, if it ever drops will not even have FreePBX in it.

                  scottalanmillerS 1 Reply Last reply Reply Quote 0
                  • scottalanmillerS
                    scottalanmiller @JaredBusch
                    last edited by

                    @JaredBusch said:

                    @NetworkNerd you can enable the beta repo and update to Elastix 2.5 which is FreePBX 2.11. But I won't do that for a production system..

                    Elastix 3.0, if it ever drops will not even have FreePBX in it.

                    I'm sure that it was have FreePBX. Elastix' goal in existing is to be a FreePBX / Asterisk distro.

                    1 Reply Last reply Reply Quote 0
                    • scottalanmillerS
                      scottalanmiller
                      last edited by

                      Although I would love to see a FreePBX alternative. It's not bad, but it isn't that great.

                      JaredBuschJ 1 Reply Last reply Reply Quote 0
                      • JaredBuschJ
                        JaredBusch @scottalanmiller
                        last edited by

                        @scottalanmiller Elastix 3.0 PBXmodule will be using Kamilio

                        1 Reply Last reply Reply Quote 0
                        • JaredBuschJ
                          JaredBusch
                          last edited by JaredBusch

                          Looks like Elastix has updated their RPM, but not posted anything intelligent about it..

                          http://bugs.elastix.org/view.php?id=2003

                          scottalanmillerS 1 Reply Last reply Reply Quote 0
                          • scottalanmillerS
                            scottalanmiller @JaredBusch
                            last edited by

                            @JaredBusch said:

                            Looks like Elastix has updated their RPM, but not posted anything intelligent about it..

                            http://bugs.elastix.org/view.php?id=2003

                            yeah we are watching that. Doing some testing on it on Friday night.

                            1 Reply Last reply Reply Quote 0
                            • 1 / 1
                            • First post
                              Last post