Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-4046HistoryJun 17, 2014 - 2:55 p.m.
CVE-2014-4046
2014-06-1714:55:00
Debian Security Bug Tracker
security-tracker.debian.org
9
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.4%
Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | asterisk | < 1:11.10.2~dfsg-1 | asterisk_1:11.10.2~dfsg-1_all.deb |
| Debian | 10 | all | asterisk | < 1:11.10.2~dfsg-1 | asterisk_1:11.10.2~dfsg-1_all.deb |
| Debian | 999 | all | asterisk | < 1:11.10.2~dfsg-1 | asterisk_1:11.10.2~dfsg-1_all.deb |
Related
securityvulns
securityvulns
AST-2014-006: Asterisk Manager User Unauthorized Shell Access
2014-06-13 00:00:00
Asterisk multiple security vulnerabilities
2014-06-13 00:00:00
prion
prion
Deserialization of untrusted data
2014-06-17 14:55:00
cve
cve
CVE-2014-4046
2014-06-17 14:55:00
nessus
nessus
Asterisk Manager Interface MixMonitor Privilege Escalation (AST-2014-006)
2014-06-17 00:00:00
FreeBSD : asterisk -- multiple vulnerabilities (f109b02f-f5a4-11e3-82e9-00a098b18457)
2014-06-18 00:00:00
Mandriva Linux Security Advisory : asterisk (MDVSA-2014:138)
2014-07-13 00:00:00
ubuntucve
ubuntucve
CVE-2014-4046
2014-06-17 00:00:00
cvelist
cvelist
CVE-2014-4046
2014-06-17 14:00:00
freebsd
freebsd
asterisk -- multiple vulnerabilities
2014-06-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0300)
2022-01-28 00:00:00
Gentoo Security Advisory GLSA 201406-25
2015-09-29 00:00:00
Debian: Security Advisory (DLA-455-1)
2023-03-08 00:00:00
mageia
mageia
Updated asterisk packages fix security vulnerabilities
2014-07-26 16:52:06
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2014-06-25 00:00:00
osv
osv
asterisk - security update
2016-05-03 00:00:00
debian
debian
[SECURITY] [DLA 455-1] asterisk security update
2016-05-03 20:35:22
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.4%
Related for DEBIANCVE:CVE-2014-4046