Asterisk safe_asterisk Privilege Escalation

The vulnerability of the safeasterisk /usr/sbin/safeasterisk script in the Asterisk IP telephony management system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to increase their privileges...

DEBIAN-CVE-2025-1131

A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...

CVE-2025-1131 Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation

A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...

CVE-2025-1131

Summary : CVE-2025-1131 is a local privilege escalation in the Asterisk toolkit. The vulnerability arises when Asterisk is started via the safe_asterisk script, which sources all shells in /etc/asterisk/startup.d/ as root without validating ownership/permissions. Non-root users with write access ...

CVE-2025-1131

A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...

CVE-2025-1131: Uncontrolled Search Path Element

A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...