CVE-2012-2416

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...

CVE-2012-2414

main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4 does not properly enforce System class authorization requirements, which allows remote authenticated users to...

CVE-2012-2416

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...

CVE-2012-2415

Heap-based buffer overflow in chanskinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of...

CVE-2012-2416

CVE-2012-2416 affects Asterisk Open Source 1.8.x prior to 1.8.11.1 and 10.x prior to 10.3.1, plus Asterisk Business Edition C.3.x prior to C.3.7.4, where enabling trustrpid lets remote authenticated users crash the daemon via SIP UPDATE triggering a connected-line update without an associated cha...

CVE-2012-2415

Heap-based buffer overflow in chanskinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of...

CVE-2012-2414: Improper Authentication

main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4 does not properly enforce System class authorization requirements, which allows remote authenticated users to...

Gentoo Security Advisory GLSA 201203-21 (Asterisk)

The remote host is missing updates announced in advisory GLSA 201203-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 2460-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 2460-1. OpenVAS Vulnerability Test $Id: deb24601.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2460-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-2416: Improper Restriction of Operations within the Bounds of a Memory Buffer

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...

CVE-2012-2415: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in chanskinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of...

PT-2012-4026

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.6.2.x through 1.6.2.23 Asterisk Open Source versions 1.8.x through 1.8.11.0 Asterisk Open Source versions 10.x through 10.3.0 Description The issue is related to a heap-based buffer overflow in the chan skinny.c...

Gentoo Security Advisory GLSA 201203-21 (Asterisk)

The remote host is missing updates announced in advisory GLSA 201203-21. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Debian: Security Advisory (DSA-2460-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2012-4025

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.6.2.x through 1.6.2.23 Asterisk Open Source versions 1.8.x through 1.8.11.0 Asterisk Open Source versions 10.x through 10.3.0 Asterisk Business Edition C.3.x through C.3.7.3 Description The issue allows remote...

PT-2012-4027

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.8.x through 1.8.11.0 Asterisk Open Source versions 10.x through 10.3.0 Asterisk Business Edition C.3.x through C.3.7.3 Description The issue allows remote authenticated users to cause a denial of service by...

Asterisk Manager User Unauthorized Shell Access (AST-2012-004)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow an authenticated, remote attacker to run arbitrary commands with the credentials of the Asterisk server. %NASLMINLEVEL 70300 C Tenable Network...

Asterisk Heap-Based Buffer Overflow in Skinny Channel Driver (AST-2012-005)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server, or possibly inject arbitrary code by sending repeated KEYPADBUTTONMESSAGE events over a Skinny channel ...

Asterisk Remote Crash Vulnerability in SIP Channel Driver (AST-2012-006)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server. This issue could be exploited by sending an UPDATE over a SIP channel after the channel dialog has been...

Debian DSA-2460-1 : asterisk - several vulnerabilities

Several vulnerabilities were discovered in the Asterisk PBX and telephony toolkit : - CVE-2012-1183 Russell Bryant discovered a buffer overflow in the Milliwatt application. - CVE-2012-2414 David Woolley discovered a privilege escalation in the Asterisk manager interface. - CVE-2012-2415 Russell...