Asterisk 1.2.9 and Asterisk 1.0.11 Released - Security Fix

The Asterisk Development Team today released Asterisk 1.2.9 and Asterisk 1.0.11 to address a security vulnerability in the IAX2 channel driver chaniax2. The vulnerability affects all users with IAX2 clients that might be compromised or used by a malicious user, and can lead to denial of service...

FreeBSD : asterisk -- denial of service vulnerability, local system access (8b683bea-d49c-11da-a672-000e0c2e438a)

Emmanouel Kellenis reports a denial of service vulnerability within asterisk. The vulnerability is caused by a buffer overflow in 'formatjpeg.c'. A large JPEG image could trigger this bug, potentially allowing a local attacker to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...

Asterisk Recording Interface (ARI) includes/main.conf Remote Credential Disclosure

The remote host is running Asterisk Recording Interface ARI, a web-based portal for the Asterisk PBX software. The version of ARI installed on the remote host allows an unauthenticated attacker to view its configuration file, which contains sensitive information such as passwords. %NASLMINLEVEL...

Asterisk Recording Interface (ARI) misc/audio.php recording Parameter Traversal Arbitrary File Access

The remote host is running Asterisk Recording Interface ARI, a web-based portal for the Asterisk PBX software. The version of ARI installed on the remote host reportedly allows an unauthenticated attacker to retrieve arbitrary sound files, such as voicemail messages, and to determine the existenc...

[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1048-1 [email protected] http://www.debian.org/security/ Martin Schulze May 1st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1048-1 [email protected] http://www.debian.org/security/ Martin Schulze May 1st, 2006 http://www.debian.org/security/faq -...

DSA-1048-1 asterisk - several vulnerabilities

Bulletin has no description...

CVE-2006-2021

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

Improper access control

Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...

Path traversal

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

CVE-2006-2020

Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...

CVE-2006-2020

Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...

CVE-2006-2020

Affected product: Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8. Component/issue: Recordings/includes/main.conf stored under the web document root with insufficient access control. Impact (as stated): Remote attackers can obtain password information from the configuration file, v...

CVE-2006-2021

CVE-2006-2021 is an absolute path traversal vulnerability in the Asterisk Recording Interface (ARI) web UI, specifically in recordings/misc/audio.php of Asterisk@Home before 2.8. An unauthenticated attacker can supply a full pathname in the recording parameter to read arbitrary MP3, WAV, and GSM ...

CVE-2006-2021

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

[Full-disclosure] [SecuriWeb 2006.1] directory traversal in Asterisk@Home and ARI

ID : 2006.1 Product : ARI Asterisk Recording Interface http://www.littlejohnconsulting.com/?q=node/11 Asterisk@home Distribution http://asteriskathome.sourceforge.net/ Affected product : = 0.7.15 Asterisk@Home 2.6 and lower Class : Access to protected information, directory traversal Remote : yes...

Asterisk Recording Interface 0.7.15 - 'Audio.php' Information Disclosure

source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary MP3,...

Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure

Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

Integer overflow

Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...

DEBIAN-CVE-2006-1827

Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...