Lucene search
HistoryJun 17, 2014 - 2:55 p.m.
CVE-2014-4046
asterisk
open source
cve-2014-4046
remote execution
shell command
mixmonitor action
security vulnerability
6.9 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.4%
Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action.
Related
securityvulns
securityvulns
AST-2014-006: Asterisk Manager User Unauthorized Shell Access
2014-06-13 00:00:00
Asterisk multiple security vulnerabilities
2014-06-13 00:00:00
debiancve
debiancve
CVE-2014-4046
2014-06-17 14:55:00
cvelist
cvelist
CVE-2014-4046
2014-06-17 14:00:00
nessus
nessus
Asterisk Manager Interface MixMonitor Privilege Escalation (AST-2014-006)
2014-06-17 00:00:00
FreeBSD : asterisk -- multiple vulnerabilities (f109b02f-f5a4-11e3-82e9-00a098b18457)
2014-06-18 00:00:00
GLSA-201406-25 : Asterisk: Multiple vulnerabilities
2014-06-26 00:00:00
ubuntucve
ubuntucve
CVE-2014-4046
2014-06-17 00:00:00
prion
prion
Deserialization of untrusted data
2014-06-17 14:55:00
freebsd
freebsd
asterisk -- multiple vulnerabilities
2014-06-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0300)
2022-01-28 00:00:00
Gentoo Security Advisory GLSA 201406-25
2015-09-29 00:00:00
Debian: Security Advisory (DLA-455-1)
2023-03-08 00:00:00
mageia
mageia
Updated asterisk packages fix security vulnerabilities
2014-07-26 16:52:06
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2014-06-25 00:00:00
osv
osv
asterisk - security update
2016-05-03 00:00:00
debian
debian
[SECURITY] [DLA 455-1] asterisk security update
2016-05-03 20:35:22
6.9 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.4%
Related for CVE-2014-4046