CVE-2006-1827

Vulnerability: Asterisk

CVE-2006-1827: Undefined Security Weakness

Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...

asterisk -- denial of service vulnerability, local system access

Emmanouel Kellenis reports a denial of service vulnerability within asterisk. The vulnerability is caused by a buffer overflow in "formatjpeg.c". A large JPEG image could trigger this bug, potentially allowing a local attacker to execute arbitrary code...

Inter-Asterisk eXchange Protocol Detection

The remote system is running a server that speaks the Inter-Asterisk eXchange Protocol. Description : The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP Telephony clients/servers to enable voice communication between them. SPDX-FileCopyrightText: 2006 Ferdy...

Inter-Asterisk eXchange Protocol Detection

The remote system is running a server that speaks the Inter-Asterisk eXchange Protocol. Description : The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP Telephony clients/servers to enable voice communication between them. OpenVAS Vulnerability Test $Id:...

Inter-Asterisk eXchange Protocol Detection

The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP telephony clients/servers to enable voice communication between them. Script Written By Ferdy Riphagen Script distributed under the GNU GPLv2 License. include"compat.inc"; if description scriptid20834;...

CVE-2005-3559

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...

CVE-2005-3559

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...

CVE-2005-3559

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...

DEBIAN-CVE-2005-3559

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...

CVE-2005-3559

CVE-2005-3559 is a directory traversal vulnerability in vmail.cgi of Asterisk, affecting 1.0.9 through 1.2.0-beta1 and enabling remote access to WAV files via a .. in the folder parameter. The issue is documented across multiple feeds (Debian DSA-1048-1 and SUSE/Nessus entries) with remediation g...

CVE-2005-3559

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...

CVE-2005-3559

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...

CVE-2005-3559: Undefined Security Weakness

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...

200511-asterisk.txt

Assurance.com.au - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Nov-2005 Software: Asterisk Web-VoiceMail Comedian VoiceMail http://www.asterisk.org/ Asterisk is a complete PBX in software. It runs on Linux, BSD and MacOSX and provides all of the feature...

Asterisk PBX server voice mail mailbox directory traversal

Web interface directory traversal allows to download any .wav file...

Asterisk vmail.cgi vulnerability

Assurance.com.au - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Nov-2005 Software: Asterisk Web-VoiceMail Comedian VoiceMail http://www.asterisk.org/ Asterisk is a complete PBX in software. It runs on Linux, BSD and MacOSX and provides all of the feature...

Asterisk 0.x1.01.2 Voicemail - Unauthorized Access

Asterisk 0.x1.01.2 Voicemail - Unauthorized Access source: https://www.securityfocus.com/bid/15336/info Asterisk is prone to an unauthorized-access vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. Successful exploitation will grant an attack...

Asterisk 0.x/1.0/1.2 Voicemail - Unauthorized Access

source: https://www.securityfocus.com/bid/15336/info Asterisk is prone to an unauthorized-access vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. Successful exploitation will grant an attacker access to a victim user's voicemail and to any...

DEBIAN-CVE-2005-2081

Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character...