CVE-2011-1599 manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x befor...
HighCVSS 9.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| digium asterisk | = 1.4.0 | No fix listed |
| digium asterisk | = 1.4.0-beta1 | No fix listed |
| digium asterisk | = 1.4.0-beta2 | No fix listed |
| digium asterisk | = 1.4.0-beta3 | No fix listed |
| digium asterisk | = 1.4.0-beta4 | No fix listed |
| digium asterisk | = 1.4.1 | No fix listed |
| digium asterisk | = 1.4.2 | No fix listed |
| digium asterisk | = 1.4.3 | No fix listed |
| digium asterisk | = 1.4.10 | No fix listed |
| digium asterisk | = 1.4.10.1 | No fix listed |
| digium asterisk | = 1.4.11 | No fix listed |
| digium asterisk | = 1.4.12 | No fix listed |
| digium asterisk | = 1.4.12.1 | No fix listed |
| digium asterisk | = 1.4.13 | No fix listed |
| digium asterisk | = 1.4.14 | No fix listed |
| digium asterisk | = 1.4.15 | No fix listed |
| digium asterisk | = 1.4.16 | No fix listed |
| digium asterisk | = 1.4.16.1 | No fix listed |
| digium asterisk | = 1.4.16.2 | No fix listed |
| digium asterisk | = 1.4.17 | No fix listed |
| digium asterisk | = 1.4.18 | No fix listed |
| digium asterisk | = 1.4.19 | No fix listed |
| digium asterisk | = 1.4.19-rc1 | No fix listed |
| digium asterisk | = 1.4.19-rc2 | No fix listed |
| digium asterisk | = 1.4.19-rc3 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| digium asterisk | = 1.4.19-rc4 | No fix listed |
| digium asterisk | = 1.4.19.1 | No fix listed |
| digium asterisk | = 1.4.19.2 | No fix listed |
| digium asterisk | = 1.4.20 | No fix listed |
| digium asterisk | = 1.4.20-rc1 | No fix listed |
| digium asterisk | = 1.4.20-rc2 | No fix listed |
| digium asterisk | = 1.4.20-rc3 | No fix listed |
| digium asterisk | = 1.4.20.1 | No fix listed |
| digium asterisk | = 1.4.21 | No fix listed |
| digium asterisk | = 1.4.21-rc1 | No fix listed |
| digium asterisk | = 1.4.21-rc2 | No fix listed |
| digium asterisk | = 1.4.21.1 | No fix listed |
| digium asterisk | = 1.4.21.2 | No fix listed |
| digium asterisk | = 1.4.22 | No fix listed |
| digium asterisk | = 1.4.22-rc1 | No fix listed |
| digium asterisk | = 1.4.22-rc2 | No fix listed |
| digium asterisk | = 1.4.22-rc3 | No fix listed |
| digium asterisk | = 1.4.22-rc4 | No fix listed |
| digium asterisk | = 1.4.22-rc5 | No fix listed |
| digium asterisk | = 1.4.22.1 | No fix listed |
| digium asterisk | = 1.4.22.2 | No fix listed |
| digium asterisk | = 1.4.23 | No fix listed |
| digium asterisk | = 1.4.23-rc1 | No fix listed |
| digium asterisk | = 1.4.23-rc2 | No fix listed |
| digium asterisk | = 1.4.23-rc3 | No fix listed |
| digium asterisk | = 1.4.23-rc4 | No fix listed |
| digium asterisk | = 1.4.23.1 | No fix listed |
| digium asterisk | = 1.4.23.2 | No fix listed |
| digium asterisk | = 1.4.24 | No fix listed |
| digium asterisk | = 1.4.24-rc1 | No fix listed |
| digium asterisk | = 1.4.24.1 | No fix listed |
| digium asterisk | = 1.4.25 | No fix listed |
| digium asterisk | = 1.4.25-rc1 | No fix listed |
| digium asterisk | = 1.4.25.1 | No fix listed |
| digium asterisk | = 1.4.26 | No fix listed |
| digium asterisk | = 1.4.26-rc1 | No fix listed |
| digium asterisk | = 1.4.26-rc2 | No fix listed |
| digium asterisk | = 1.4.26-rc3 | No fix listed |
| digium asterisk | = 1.4.26-rc4 | No fix listed |
| digium asterisk | = 1.4.26-rc5 | No fix listed |
| digium asterisk | = 1.4.26-rc6 | No fix listed |
| digium asterisk | = 1.4.26.1 | No fix listed |
| digium asterisk | = 1.4.26.2 | No fix listed |
| digium asterisk | = 1.4.26.3 | No fix listed |
| digium asterisk | = 1.4.27 | No fix listed |
| digium asterisk | = 1.4.27-rc1 | No fix listed |
| digium asterisk | = 1.4.27-rc2 | No fix listed |
| digium asterisk | = 1.4.27-rc3 | No fix listed |
| digium asterisk | = 1.4.27-rc4 | No fix listed |
| digium asterisk | = 1.4.27-rc5 | No fix listed |
| digium asterisk | = 1.4.27.1 | No fix listed |
| digium asterisk | = 1.4.28 | No fix listed |
| digium asterisk | = 1.4.28-rc1 | No fix listed |
| digium asterisk | = 1.4.29 | No fix listed |
| digium asterisk | = 1.4.29-rc1 | No fix listed |
| digium asterisk | = 1.4.29.1 | No fix listed |
| digium asterisk | = 1.4.30 | No fix listed |
| digium asterisk | = 1.4.30-rc2 | No fix listed |
| digium asterisk | = 1.4.30-rc3 | No fix listed |
| digium asterisk | = 1.4.31 | No fix listed |
| digium asterisk | = 1.4.31-rc1 | No fix listed |
| digium asterisk | = 1.4.31-rc2 | No fix listed |
| digium asterisk | = 1.4.32 | No fix listed |
| digium asterisk | = 1.4.32-rc1 | No fix listed |
| digium asterisk | = 1.4.33 | No fix listed |
| digium asterisk | = 1.4.33-rc1 | No fix listed |
| digium asterisk | = 1.4.33-rc2 | No fix listed |
| digium asterisk | = 1.4.33.1 | No fix listed |
| digium asterisk | = 1.4.34 | No fix listed |
| digium asterisk | = 1.4.34-rc1 | No fix listed |
| digium asterisk | = 1.4.34-rc2 | No fix listed |
| digium asterisk | = 1.4.35 | No fix listed |
| digium asterisk | = 1.4.35-rc1 | No fix listed |
| digium asterisk | = 1.4.36 | No fix listed |
| digium asterisk | = 1.4.36-rc1 | No fix listed |
| digium asterisk | = 1.4.37 | No fix listed |
| digium asterisk | = 1.4.37-rc1 | No fix listed |
| digium asterisk | = 1.4.38 | No fix listed |
| digium asterisk | = 1.4.38-rc1 | No fix listed |
| digium asterisk | = 1.4.39 | No fix listed |
| digium asterisk | = 1.4.39-rc1 | No fix listed |
| digium asterisk | = 1.4.39.1 | No fix listed |
| digium asterisk | = 1.4.39.2 | No fix listed |
| digium asterisk | = 1.4.40 | No fix listed |
| digium asterisk | = 1.4.40-rc1 | No fix listed |
| digium asterisk | = 1.4.40-rc2 | No fix listed |
| digium asterisk | = 1.4.40-rc3 | No fix listed |
| digium asterisk | = 1.6.2.0 | No fix listed |
| digium asterisk | = 1.6.2.0-rc2 | No fix listed |
| digium asterisk | = 1.6.2.0-rc3 | No fix listed |
| digium asterisk | = 1.6.2.0-rc4 | No fix listed |
| digium asterisk | = 1.6.2.0-rc5 | No fix listed |
| digium asterisk | = 1.6.2.0-rc6 | No fix listed |
| digium asterisk | = 1.6.2.0-rc7 | No fix listed |
| digium asterisk | = 1.6.2.0-rc8 | No fix listed |
| digium asterisk | = 1.6.2.1 | No fix listed |
| digium asterisk | = 1.6.2.1-rc1 | No fix listed |
| digium asterisk | = 1.6.2.2 | No fix listed |
| digium asterisk | = 1.6.2.3-rc2 | No fix listed |
| digium asterisk | = 1.6.2.4 | No fix listed |
| digium asterisk | = 1.6.2.5 | No fix listed |
| digium asterisk | = 1.6.2.6 | No fix listed |
| digium asterisk | = 1.6.2.6-rc1 | No fix listed |
| digium asterisk | = 1.6.2.6-rc2 | No fix listed |
| digium asterisk | = 1.6.2.15-rc1 | No fix listed |
| digium asterisk | = 1.6.2.16 | No fix listed |
| digium asterisk | = 1.6.2.16-rc1 | No fix listed |
| digium asterisk | = 1.6.2.16.1 | No fix listed |
| digium asterisk | = 1.6.2.16.2 | No fix listed |
| digium asterisk | = 1.6.2.17 | No fix listed |
| digium asterisk | = 1.6.2.17-rc1 | No fix listed |
| digium asterisk | = 1.6.2.17-rc2 | No fix listed |
| digium asterisk | = 1.6.2.17-rc3 | No fix listed |
| digium asterisk | = 1.6.2.17.1 | No fix listed |
| digium asterisk | = 1.6.2.17.2 | No fix listed |
| digium asterisk | = 1.8.0 | No fix listed |
| digium asterisk | = 1.8.0-beta1 | No fix listed |
| digium asterisk | = 1.8.0-beta2 | No fix listed |
| digium asterisk | = 1.8.0-beta3 | No fix listed |
| digium asterisk | = 1.8.0-beta4 | No fix listed |
| digium asterisk | = 1.8.0-beta5 | No fix listed |
| digium asterisk | = 1.8.0-rc2 | No fix listed |
| digium asterisk | = 1.8.0-rc3 | No fix listed |
| digium asterisk | = 1.8.0-rc4 | No fix listed |
| digium asterisk | = 1.8.0-rc5 | No fix listed |
| digium asterisk | = 1.8.1 | No fix listed |
| digium asterisk | = 1.8.1-rc1 | No fix listed |
| digium asterisk | = 1.8.1.1 | No fix listed |
| digium asterisk | = 1.8.1.2 | No fix listed |
| digium asterisk | = 1.8.2 | No fix listed |
| digium asterisk | = 1.8.2.1 | No fix listed |
| digium asterisk | = 1.8.2.2 | No fix listed |
| digium asterisk | = 1.8.2.3 | No fix listed |
| digium asterisk | = 1.8.2.4 | No fix listed |
| digium asterisk | = 1.8.3 | No fix listed |
| digium asterisk | = 1.8.3-rc1 | No fix listed |
| digium asterisk | = 1.8.3-rc2 | No fix listed |
| digium asterisk | = 1.8.3-rc3 | No fix listed |
| digium asterisk | = 1.8.3.1 | No fix listed |
| digium asterisk | = 1.8.3.2 | No fix listed |
| digium asterisk | = c.1.0-beta7 | No fix listed |
| digium asterisk | = c.1.0-beta8 | No fix listed |
| digium asterisk | = c.1.6 | No fix listed |
| digium asterisk | = c.1.6.1 | No fix listed |
| digium asterisk | = c.1.6.2 | No fix listed |
| digium asterisk | = c.1.8.0 | No fix listed |
| digium asterisk | = c.1.8.1 | No fix listed |
| digium asterisk | = c.2.3 | No fix listed |
| digium asterisk | = c.3.0 | No fix listed |
| digium asterisk | = c.3.1.0 | No fix listed |
| digium asterisk | = c.3.1.1 | No fix listed |
| digium asterisk | = c.3.2.2 | No fix listed |
| digium asterisk | = c.3.2.3 | No fix listed |
| digium asterisk | = c.3.3.2 | No fix listed |
| digium asterisk | = c.3.6.2 | No fix listed |
| digium asterisk | = 1.6.1.0 | No fix listed |
| digium asterisk | = 1.6.1.0-rc2 | No fix listed |
| digium asterisk | = 1.6.1.0-rc3 | No fix listed |
| digium asterisk | = 1.6.1.0-rc4 | No fix listed |
| digium asterisk | = 1.6.1.0-rc5 | No fix listed |
| digium asterisk | = 1.6.1.1 | No fix listed |
| digium asterisk | = 1.6.1.2 | No fix listed |
| digium asterisk | = 1.6.1.3-rc1 | No fix listed |
| digium asterisk | = 1.6.1.4 | No fix listed |
| digium asterisk | = 1.6.1.5 | No fix listed |
| digium asterisk | = 1.6.1.5-rc1 | No fix listed |
| digium asterisk | = 1.6.1.6 | No fix listed |
| digium asterisk | = 1.6.1.7-rc1 | No fix listed |
| digium asterisk | = 1.6.1.7-rc2 | No fix listed |
| digium asterisk | = 1.6.1.8 | No fix listed |
| digium asterisk | = 1.6.1.9 | No fix listed |
| digium asterisk | = 1.6.1.10 | No fix listed |
| digium asterisk | = 1.6.1.10-rc1 | No fix listed |
| digium asterisk | = 1.6.1.10-rc2 | No fix listed |
| digium asterisk | = 1.6.1.10-rc3 | No fix listed |
References
- downloads.digium.com vendor-advisory
- FEDORA-2011-5835 vendor-advisory
- FEDORA-2011-6208 vendor-advisory
- [oss-security] 20110422 Re: CVE Request -- Asterisk Security Vulnerability mailing-list
- 44197 third-party-advisory vendor-advisory
- 44529 third-party-advisory
- 1025433 vdb-entry
- DSA-2225 vendor-advisory
- 47537 vdb-entry
- ADV-2011-1086 vdb-entry vendor-advisory
- ADV-2011-1107 vdb-entry
- ADV-2011-1188 vdb-entry
- Debian Security Tracker CVE-2011-1599 vendor-advisory