Vulnerability Name:

CVE-2011-1599 (CCN-66999)

Assigned:2011-04-21
Published:2011-04-21
Updated:2011-09-07
Summary:manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:9.0 High (CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C)
6.7 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-20
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2011-1599

Source: CCN
Type: AST-2011-006
Asterisk Manager User Shell Access

Source: CONFIRM
Type: Vendor Advisory
http://downloads.digium.com/pub/security/AST-2011-006.html

Source: FEDORA
Type: UNKNOWN
FEDORA-2011-5835

Source: FEDORA
Type: UNKNOWN
FEDORA-2011-6208

Source: MLIST
Type: UNKNOWN
[oss-security] 20110422 Re: CVE Request -- Asterisk Security Vulnerability

Source: CCN
Type: SA44197
Asterisk Security Bypass and Denial of Service Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
44197

Source: SECUNIA
Type: UNKNOWN
44529

Source: SECTRACK
Type: UNKNOWN
1025433

Source: DEBIAN
Type: UNKNOWN
DSA-2225

Source: DEBIAN
Type: DSA-2225
asterisk -- several vulnerabilities

Source: CCN
Type: OSVDB ID: 73434
Asterisk Multiple Products Manager Interface manager.c Originate Action Remote Command Execution

Source: BID
Type: UNKNOWN
47537

Source: CCN
Type: BID-47537
Asterisk Manager Interface Arbitrary Command Execution Security Bypass Vulnerability

Source: VUPEN
Type: Vendor Advisory
ADV-2011-1086

Source: VUPEN
Type: UNKNOWN
ADV-2011-1107

Source: VUPEN
Type: UNKNOWN
ADV-2011-1188

Source: XF
Type: UNKNOWN
asterisk-interface-command-exec(66999)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:digium:asterisk:1.4.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.3:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.10:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.10.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.11:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.12:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.12.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.13:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.14:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.15:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.16:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.16.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.16.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.17:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.18:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.19:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.19:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.19:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.19:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.19:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.19.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.19.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.20:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.20:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.20:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.20:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.20.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.21:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.21:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.21:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.21.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.21.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.22:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.22:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.22:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.22:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.22:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.22:rc5:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.22.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.22.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.23:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.23:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.23:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.23:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.23:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.23.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.23.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.24:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.24:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.24.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.25:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.25:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.25.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26:rc5:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26:rc6:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.26.3:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.27:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.27:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.27:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.27:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.27:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.27:rc5:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.27.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.28:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.28:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.29:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.29:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.29.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.30:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.30:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.30:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.31:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.31:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.31:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.32:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.32:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.33:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.33:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.33:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.33.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.34:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.34:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.34:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.35:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.35:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.36:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.36:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.37:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.37:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.38:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.38:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.39:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.39:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.39.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.39.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.40:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.40:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.40:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.4.40:rc3:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:digium:asterisk:1.6.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.0:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.0:rc5:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.0:rc6:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.0:rc7:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.0:rc8:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.1:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.3:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.6:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.6:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.6:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.15:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.16:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.16:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.16.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.16.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.17:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.17:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.17:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.17:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.17.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.2.17.2:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/a:digium:asterisk:1.8.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.0:beta5:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.0:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.0:rc5:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.1:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.3:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.3:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.3:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.3:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.8.3.2:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/a:digium:asterisk:c.1.0:beta7:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.1.0:beta8:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.1.6:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.1.6.1:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.1.6.2:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.1.8.0:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.1.8.1:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.2.3:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.3.0:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.3.1.0:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.3.1.1:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.3.2.2:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.3.2.3:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.3.3.2:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.3.6.2:-:business:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:c.3.6.3:-:business:*:*:*:*:*

    • Configuration 5:
  • cpe:/a:digium:asterisk:1.6.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.0:rc4:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.0:rc5:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.3:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.5:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.7:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.7:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.8:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.9:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.10:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.10:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.10:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.10:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.11:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.12:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.12:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.13:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.13:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.14:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.15:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.16:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.17:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.18:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.18:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.18:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.19:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.19:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.19:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.19:rc3:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.20:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.20:rc1:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.20:rc2:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.21:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.22:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.23:*:*:*:*:*:*:*
  • OR cpe:/a:digium:asterisk:1.6.1.24:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:digium:asterisk:1.8.12:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:12914
    P
    		DSA-2225-1 asterisk -- several
    2014-06-23
    BACK
    digium asterisk 1.4.0
    digium asterisk 1.4.0 beta1
    digium asterisk 1.4.0 beta2
    digium asterisk 1.4.0 beta3
    digium asterisk 1.4.0 beta4
    digium asterisk 1.4.1
    digium asterisk 1.4.2
    digium asterisk 1.4.3
    digium asterisk 1.4.10
    digium asterisk 1.4.10.1
    digium asterisk 1.4.11
    digium asterisk 1.4.12
    digium asterisk 1.4.12.1
    digium asterisk 1.4.13
    digium asterisk 1.4.14
    digium asterisk 1.4.15
    digium asterisk 1.4.16
    digium asterisk 1.4.16.1
    digium asterisk 1.4.16.2
    digium asterisk 1.4.17
    digium asterisk 1.4.18
    digium asterisk 1.4.19
    digium asterisk 1.4.19 rc1
    digium asterisk 1.4.19 rc2
    digium asterisk 1.4.19 rc3
    digium asterisk 1.4.19 rc4
    digium asterisk 1.4.19.1
    digium asterisk 1.4.19.2
    digium asterisk 1.4.20
    digium asterisk 1.4.20 rc1
    digium asterisk 1.4.20 rc2
    digium asterisk 1.4.20 rc3
    digium asterisk 1.4.20.1
    digium asterisk 1.4.21
    digium asterisk 1.4.21 rc1
    digium asterisk 1.4.21 rc2
    digium asterisk 1.4.21.1
    digium asterisk 1.4.21.2
    digium asterisk 1.4.22
    digium asterisk 1.4.22 rc1
    digium asterisk 1.4.22 rc2
    digium asterisk 1.4.22 rc3
    digium asterisk 1.4.22 rc4
    digium asterisk 1.4.22 rc5
    digium asterisk 1.4.22.1
    digium asterisk 1.4.22.2
    digium asterisk 1.4.23
    digium asterisk 1.4.23 rc1
    digium asterisk 1.4.23 rc2
    digium asterisk 1.4.23 rc3
    digium asterisk 1.4.23 rc4
    digium asterisk 1.4.23.1
    digium asterisk 1.4.23.2
    digium asterisk 1.4.24
    digium asterisk 1.4.24 rc1
    digium asterisk 1.4.24.1
    digium asterisk 1.4.25
    digium asterisk 1.4.25 rc1
    digium asterisk 1.4.25.1
    digium asterisk 1.4.26
    digium asterisk 1.4.26 rc1
    digium asterisk 1.4.26 rc2
    digium asterisk 1.4.26 rc3
    digium asterisk 1.4.26 rc4
    digium asterisk 1.4.26 rc5
    digium asterisk 1.4.26 rc6
    digium asterisk 1.4.26.1
    digium asterisk 1.4.26.2
    digium asterisk 1.4.26.3
    digium asterisk 1.4.27
    digium asterisk 1.4.27 rc1
    digium asterisk 1.4.27 rc2
    digium asterisk 1.4.27 rc3
    digium asterisk 1.4.27 rc4
    digium asterisk 1.4.27 rc5
    digium asterisk 1.4.27.1
    digium asterisk 1.4.28
    digium asterisk 1.4.28 rc1
    digium asterisk 1.4.29
    digium asterisk 1.4.29 rc1
    digium asterisk 1.4.29.1
    digium asterisk 1.4.30
    digium asterisk 1.4.30 rc2
    digium asterisk 1.4.30 rc3
    digium asterisk 1.4.31
    digium asterisk 1.4.31 rc1
    digium asterisk 1.4.31 rc2
    digium asterisk 1.4.32
    digium asterisk 1.4.32 rc1
    digium asterisk 1.4.33
    digium asterisk 1.4.33 rc1
    digium asterisk 1.4.33 rc2
    digium asterisk 1.4.33.1
    digium asterisk 1.4.34
    digium asterisk 1.4.34 rc1
    digium asterisk 1.4.34 rc2
    digium asterisk 1.4.35
    digium asterisk 1.4.35 rc1
    digium asterisk 1.4.36
    digium asterisk 1.4.36 rc1
    digium asterisk 1.4.37
    digium asterisk 1.4.37 rc1
    digium asterisk 1.4.38
    digium asterisk 1.4.38 rc1
    digium asterisk 1.4.39
    digium asterisk 1.4.39 rc1
    digium asterisk 1.4.39.1
    digium asterisk 1.4.39.2
    digium asterisk 1.4.40
    digium asterisk 1.4.40 rc1
    digium asterisk 1.4.40 rc2
    digium asterisk 1.4.40 rc3
    digium asterisk 1.6.2.0
    digium asterisk 1.6.2.0 rc2
    digium asterisk 1.6.2.0 rc3
    digium asterisk 1.6.2.0 rc4
    digium asterisk 1.6.2.0 rc5
    digium asterisk 1.6.2.0 rc6
    digium asterisk 1.6.2.0 rc7
    digium asterisk 1.6.2.0 rc8
    digium asterisk 1.6.2.1
    digium asterisk 1.6.2.1 rc1
    digium asterisk 1.6.2.2
    digium asterisk 1.6.2.3 rc2
    digium asterisk 1.6.2.4
    digium asterisk 1.6.2.5
    digium asterisk 1.6.2.6
    digium asterisk 1.6.2.6 rc1
    digium asterisk 1.6.2.6 rc2
    digium asterisk 1.6.2.15 rc1
    digium asterisk 1.6.2.16
    digium asterisk 1.6.2.16 rc1
    digium asterisk 1.6.2.16.1
    digium asterisk 1.6.2.16.2
    digium asterisk 1.6.2.17
    digium asterisk 1.6.2.17 rc1
    digium asterisk 1.6.2.17 rc2
    digium asterisk 1.6.2.17 rc3
    digium asterisk 1.6.2.17.1
    digium asterisk 1.6.2.17.2
    digium asterisk 1.8.0
    digium asterisk 1.8.0 beta1
    digium asterisk 1.8.0 beta2
    digium asterisk 1.8.0 beta3
    digium asterisk 1.8.0 beta4
    digium asterisk 1.8.0 beta5
    digium asterisk 1.8.0 rc2
    digium asterisk 1.8.0 rc3
    digium asterisk 1.8.0 rc4
    digium asterisk 1.8.0 rc5
    digium asterisk 1.8.1
    digium asterisk 1.8.1 rc1
    digium asterisk 1.8.1.1
    digium asterisk 1.8.1.2
    digium asterisk 1.8.2
    digium asterisk 1.8.2.1
    digium asterisk 1.8.2.2
    digium asterisk 1.8.2.3
    digium asterisk 1.8.2.4
    digium asterisk 1.8.3
    digium asterisk 1.8.3 rc1
    digium asterisk 1.8.3 rc2
    digium asterisk 1.8.3 rc3
    digium asterisk 1.8.3.1
    digium asterisk 1.8.3.2
    digium asterisk c.1.0 beta7
    digium asterisk c.1.0 beta8
    digium asterisk c.1.6 -
    digium asterisk c.1.6.1 -
    digium asterisk c.1.6.2 -
    digium asterisk c.1.8.0 -
    digium asterisk c.1.8.1 -
    digium asterisk c.2.3 -
    digium asterisk c.3.0 -
    digium asterisk c.3.1.0 -
    digium asterisk c.3.1.1 -
    digium asterisk c.3.2.2 -
    digium asterisk c.3.2.3 -
    digium asterisk c.3.3.2 -
    digium asterisk c.3.6.2 -
    digium asterisk c.3.6.3 -
    digium asterisk 1.6.1.0
    digium asterisk 1.6.1.0 rc2
    digium asterisk 1.6.1.0 rc3
    digium asterisk 1.6.1.0 rc4
    digium asterisk 1.6.1.0 rc5
    digium asterisk 1.6.1.1
    digium asterisk 1.6.1.2
    digium asterisk 1.6.1.3 rc1
    digium asterisk 1.6.1.4
    digium asterisk 1.6.1.5
    digium asterisk 1.6.1.5 rc1
    digium asterisk 1.6.1.6
    digium asterisk 1.6.1.7 rc1
    digium asterisk 1.6.1.7 rc2
    digium asterisk 1.6.1.8
    digium asterisk 1.6.1.9
    digium asterisk 1.6.1.10
    digium asterisk 1.6.1.10 rc1
    digium asterisk 1.6.1.10 rc2
    digium asterisk 1.6.1.10 rc3
    digium asterisk 1.6.1.11
    digium asterisk 1.6.1.12
    digium asterisk 1.6.1.12 rc1
    digium asterisk 1.6.1.13
    digium asterisk 1.6.1.13 rc1
    digium asterisk 1.6.1.14
    digium asterisk 1.6.1.15 rc2
    digium asterisk 1.6.1.16
    digium asterisk 1.6.1.17
    digium asterisk 1.6.1.18
    digium asterisk 1.6.1.18 rc1
    digium asterisk 1.6.1.18 rc2
    digium asterisk 1.6.1.19
    digium asterisk 1.6.1.19 rc1
    digium asterisk 1.6.1.19 rc2
    digium asterisk 1.6.1.19 rc3
    digium asterisk 1.6.1.20
    digium asterisk 1.6.1.20 rc1
    digium asterisk 1.6.1.20 rc2
    digium asterisk 1.6.1.21
    digium asterisk 1.6.1.22
    digium asterisk 1.6.1.23
    digium asterisk 1.6.1.24
    digium asterisk 1.8.12