6 matches found
The vulnerability of the safe_asterisk (/usr/sbin/safe_asterisk) script in the Asterisk telephony management system allows a hacker to elevate their privileges.
The vulnerability of the safeasterisk /usr/sbin/safeasterisk script in the Asterisk IP telephony management system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to increase their privileges...
DEBIAN-CVE-2025-1131
A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...
CVE-2025-1131
Summary : CVE-2025-1131 is a local privilege escalation in the Asterisk toolkit. The vulnerability arises when Asterisk is started via the safe_asterisk script, which sources all shells in /etc/asterisk/startup.d/ as root without validating ownership/permissions. Non-root users with write access ...
CVE-2025-1131 Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation
A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...
CVE-2025-1131
A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...
CVE-2025-1131: Uncontrolled Search Path Element
A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...