3558 matches found
CVE-2024-57520
Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the actioncreateconfig function. NOTE: this is disputed by the Supplier because the impact is limited to creating empty files outside of the Asterisk product directory aka directory traversal...
PT-2025-5774 · Asterisk +1 · Asterisk +1
Name of the Vulnerable Software and Affected Versions: Asterisk version 22 Description: The issue allows a remote attacker to execute arbitrary code via the action createconfig function. This is due to an insecure permissions vulnerability. Recommendations: For Asterisk version 22, as a temporary...
Asterisk 安全漏洞
Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk v22 has a security vulnerability that originates from the execution of arbitrary code via the actioncreateconfig function...
Debian dla-4042 : asterisk - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4042 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4042-1 [email protected] https://www.debian.org/lts/security/...
CVE-2024-57520
Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the actioncreateconfig function. NOTE: this is disputed by the Supplier because the impact is limited to creating empty files outside of the Asterisk product directory aka directory traversal...
The vulnerability of Asterisk management systems, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of Asterisk management systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...
Debian dla-3696 : asterisk - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3696 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3696-1 [email protected]...
ROS-20250121-08
Vulnerability of Asterisk management systems is related to improper access restrictions for users with the the "write=originate" role. Exploitation of the vulnerability could allow an attacker acting remotely, escalate privileges on the system...
FreeBSD : asterisk - path traversal (7624c151-d116-11ef-b232-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7624c151-d116-11ef-b232-b42e991fc52e advisory. [email protected] reports: An issue in the actionlistcategories function of Sangoma Asterisk...
GLSA-202412-03 : Asterisk: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202412-03 Asterisk: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Asterisk. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...
Asterisk: Multiple Vulnerabilities
Background Asterisk is an open source telephony engine and toolkit. Description Multiple vulnerabilities have been discovered in Asterisk. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...
Asterisk AMI Originate Authenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Asterisk AMI Originate Authenticated RCE', 'Description' = %q On Asterisk, prior to versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk...
Asterisk AMI Originate Authenticated Remote Code Execution Exploit
On Asterisk, prior to versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with write=originate may change all configuration files in the /etc/asterisk/ directory. Writing a new extension can be created which performs a system command to...
CVE-2024-53566
An issue in the actionlistcategories function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal...
DEBIAN-CVE-2024-53566
An issue in the actionlistcategories function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal...
ALPINE-CVE-2024-53566
An issue in the actionlistcategories function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal...
UBUNTU-CVE-2024-53566
An issue in the actionlistcategories function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal...
FreePBX 安全漏洞
FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. A file upload vulnerability exists in FreePBX. The vulnerability stems from the application's lack of effective...
asterisk - path traversal
[email protected] reports: An issue in the actionlistcategories function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal...
