4015 matches found
Path traversal
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
Improper access control
Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...
CVE-2006-2020
Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...
CVE-2006-2021
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
CVE-2006-2021
CVE-2006-2021 is an absolute path traversal vulnerability in the Asterisk Recording Interface (ARI) web UI, specifically in recordings/misc/audio.php of Asterisk@Home before 2.8. An unauthenticated attacker can supply a full pathname in the recording parameter to read arbitrary MP3, WAV, and GSM ...
CVE-2006-2020
Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...
CVE-2006-2021
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
CVE-2006-2020
Affected product: Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8. Component/issue: Recordings/includes/main.conf stored under the web document root with insufficient access control. Impact (as stated): Remote attackers can obtain password information from the configuration file, v...
CVE-2006-2021: Undefined Security Weakness
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
CVE-2006-2020: Undefined Security Weakness
Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...
Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure
Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...
[Full-disclosure] [SecuriWeb 2006.1] directory traversal in Asterisk@Home and ARI
ID : 2006.1 Product : ARI Asterisk Recording Interface http://www.littlejohnconsulting.com/?q=node/11 Asterisk@home Distribution http://asteriskathome.sourceforge.net/ Affected product : = 0.7.15 Asterisk@Home 2.6 and lower Class : Access to protected information, directory traversal Remote : yes...
Asterisk Recording Interface 0.7.15 - 'Audio.php' Information Disclosure
source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary MP3,...
Integer overflow
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
DEBIAN-CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...