An unauthenticated attacker reaching port 4307/TCP on TrueConf Server can escape a sandboxed script environment and run arbitrary code on the underlying host, and the flaw is already being exploited.
Posts tagged: TrueConf
TrueConf Server Missing Authentication for Critical Function Vulnerability
An unauthenticated attacker who can reach port 4307/TCP on a TrueConf Server can trigger an undocumented function to run arbitrary scripts, with no login or user action required.