Digium Asterisk Business Edition C.1.0-beta8
Approved changes feed: RSS · Atom
cpe:2.3:a:digium:asterisk:c.1.0:beta8:business:*:*:*:*:*
part: a version: c.1.0 update: beta8
| Vendor | Digium (05ad29b7-5b41-56d5-935d-a279ab7f14bc) |
|---|---|
| Product | Asterisk (a75a6886-b0b4-5160-9cfa-f749f3c86956) |
| Edition | business |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/asterisk/asterisk |
purl2cpe | 2026-06-01 10:15:41.875578 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-1599 |
vulnerable | 2026-06-08 04:58:00.899125 |
Details available
manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header.
Published: 2011-04-27T00:00:00.000Z
Updated: 2024-08-06T22:28:41.962Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1507 |
vulnerable | 2026-06-08 04:57:59.924693 |
Details available
Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial of service (file descriptor exhaustion and disk space exhaustion) via a series of TCP connections.
Published: 2011-04-27T00:00:00.000Z
Updated: 2024-08-06T22:28:41.814Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1147 |
vulnerable | 2026-06-08 04:57:56.099193 |
Details available
Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet.
Published: 2011-03-15T17:00:00.000Z
Updated: 2024-08-06T22:14:27.830Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0685 |
vulnerable | 2026-06-08 04:52:03.992301 |
Details available
The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern matches, allows context-dependent attackers to inject strings into the dialplan using metacharacters that are injected when the variable is expanded, as demonstrated using the Dial application to process a crafted SIP INVITE message that adds an unintended outgoing channel leg. NOTE: it could be argued that this is not a vulnerability in Asterisk, but a class of vulnerabilities that can occur in any program that uses this feature without the associated filtering functionality that is already available.
Published: 2010-02-23T20:00:00.000Z
Updated: 2024-08-07T00:59:38.329Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.