CVE-2012-2414

🗓️ 30 Apr 2012 20:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 25 Views

Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4 allows remote authenticated users to execute arbitrary commands

Reporter	Title	Published	Views	Family All 35
FreeBSD	asterisk -- multiple vulnerabilities	23 Apr 201200:00	–	freebsd
Tenable Nessus	Asterisk Manager User Unauthorized Shell Access (AST-2012-004)	27 Apr 201200:00	–	nessus
Tenable Nessus	Debian DSA-2460-1 : asterisk - several vulnerabilities	26 Apr 201200:00	–	nessus
Tenable Nessus	Fedora 16 : asterisk-1.8.11.1-1.fc16 (2012-6612)	4 May 201200:00	–	nessus
Tenable Nessus	Fedora 17 : asterisk-10.3.1-1.fc17 (2012-6704)	7 May 201200:00	–	nessus
Tenable Nessus	Fedora 15 : asterisk-1.8.11.1-1.fc15 (2012-6724)	7 May 201200:00	–	nessus
Tenable Nessus	FreeBSD : asterisk -- multiple vulnerabilities (1c5abbe2-8d7f-11e1-a374-14dae9ebcf89)	24 Apr 201200:00	–	nessus
Tenable Nessus	GLSA-201206-05 : Asterisk: Multiple vulnerabilities	21 Jun 201200:00	–	nessus
Check Point Advisories	Digium Asterisk Manager User Shell Command Execution (CVE-2012-2414)	4 Sep 201200:00	–	checkpoint_advisories
Check Point Advisories	Digium Asterisk Manager User Shell Command Execution - Ver2 (CVE-2012-2414)	28 Dec 201400:00	–	checkpoint_advisories

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	asterisk	1:1.8.11.1~dfsg-1	asterisk_1:1.8.11.1~dfsg-1_any.deb
Debian	999	any	asterisk	1:1.8.11.1~dfsg-1	asterisk_1:1.8.11.1~dfsg-1_any.deb

30 Apr 2012 20:00Current

7.1High risk

Vulners AI Score7.1

CVSS 26.5

EPSS0.02717