CVE-2018-4059
published 2019-03-21CVE-2018-4059: An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server…
PriorityP358critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.90%
77.1th percentile
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuration, which can lead to additional attacks. An attacker who can get access to the telnet port can gain administrator access to the TURN server.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| coturn_project | coturn | < 4.5.0.9 | 4.5.0.9 |
| coturn_project | coturn | >= 0 < 4.5.1.0-1 | 4.5.1.0-1 |
| coturn_project | coturn | >= 0 < 4.5.1.0-1 | 4.5.1.0-1 |
| coturn_project | coturn | >= 0 < 4.5.1.0-1 | 4.5.1.0-1 |
| coturn_project | coturn | >= 0 < 4.5.1.0-1 | 4.5.1.0-1 |
| debian | coturn | < coturn 4.5.1.0-1 (bookworm) | coturn 4.5.1.0-1 (bookworm) |
| talos | coturn | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv9.8CRITICAL
vendor_debian9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7q4q-c7wp-55p8: An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4
ghsa_unreviewed·2022-05-13
CVE-2018-4059 [CRITICAL] CWE-798 GHSA-7q4q-c7wp-55p8: An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuration, which can lead to additional attacks. An attacker who can get access to the telnet port can gain administrator access to the TURN server.
OSV
CVE-2018-4059: An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4
osv·2019-03-21·CVSS 9.8
CVE-2018-4059 [CRITICAL] CVE-2018-4059: An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuration, which can lead to additional attacks. An attacker who can get access to the telnet port can gain administrator access to the TURN server.
Debian
CVE-2018-4059: coturn - An exploitable unsafe default configuration vulnerability exists in the TURN ser...
vendor_debian·2018·CVSS 9.8
CVE-2018-4059 [CRITICAL] CVE-2018-4059: coturn - An exploitable unsafe default configuration vulnerability exists in the TURN ser...
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuration, which can lead to additional attacks. An attacker who can get access to the telnet port can gain administrator access to the TURN server.
Scope: local
bookworm: resolved (fixed in 4.5.1.0-1)
bullseye: resolved (fixed in 4.5.1.0-1)
forky: resolved (fixed in 4.5.1.0-1)
sid: resolved (fixed in 4.5.1.0-1)
trixie: resolved (fixed in 4.5.1.0-1)
No detection rules found.
No public exploits indexed.
Talos
Vulnerability Spotlight: Multiple vulnerabilities in coTURN
blogs_talos·2019-01-29·CVSS 9.8
[CRITICAL] Vulnerability Spotlight: Multiple vulnerabilities in coTURN
Nicolas Edet of Cisco discovered these vulnerabilities.
### Executive summary
Today, Cisco Talos is disclosing three vulnerabilities in coTURN. coTURN is an open-source implementation of TURN and STUN servers that can be used as a general-purpose networking traffic TURN server. TURN servers are usually deployed in so-called “DMZ” zones — any server reachable from the internet — to provide firewall traversal solutions.
In accordance with our coordinated disclosure policy, Cisco Talos worked with coTURN to ensure that these issues are resolved and that an update is available for affected customers.
### Vulnerability details
coTURN administrator web portal SQL injection vulnerability (TALOS-2018-0730/CVE-2018-4056)
An exploitable SQL injection vulnerability exists in the administrator w
Talos
Vulnerability Spotlight: Multiple vulnerabilities in coTURN
blogs_talos·2019-01-29·CVSS 9.8
[CRITICAL] Vulnerability Spotlight: Multiple vulnerabilities in coTURN
## Vulnerability Spotlight: Multiple vulnerabilities in coTURN
Nicolas Edet of Cisco discovered these vulnerabilities.
## Executive summary
Today, Cisco Talos is disclosing three vulnerabilities in coTURN. coTURN is an open-source implementation of TURN and STUN servers that can be used as a general-purpose networking traffic TURN server. TURN servers are usually deployed in so-called “DMZ” zones — any server reachable from the internet — to provide firewall traversal solutions. In accordance with our coordinated disclosure policy, Cisco Talos worked with coTURN to ensure that these issues are resolved and that an update is available for affected customers.
## Vulnerability details
coTURN administrator web portal SQL injection vulnerability (TALOS-2018-0730/CVE-2018-4056) An exploitab
2019-03-21
Published