Ubuntu.comUB:CVE-2014-4046CVE-2014-4046
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.4%
Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and
Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated
Manager users to execute arbitrary shell commands via a MixMonitor action.
References
downloads.asterisk.org/pub/security/AST-2014-006.html
packetstormsecurity.com/files/127088/Asterisk-Project-Security-Advisory-AST-2014-006.html
launchpad.net/bugs/cve/CVE-2014-4046
nvd.nist.gov/vuln/detail/CVE-2014-4046
security-tracker.debian.org/tracker/CVE-2014-4046
www.cve.org/CVERecord?id=CVE-2014-4046
Related
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.4%