CVE-2007-2294

Опубликовано: 26 апр. 2007

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:asterisk:asterisk:1.2.0_beta1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.0_beta2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.9:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.12:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.13:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.14:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.15:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.16:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.2.17:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk:1.4_beta:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04117

Низкий

7.8 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2007-2294

ubuntu

больше 18 лет назад

CVE-2007-2294

debian

больше 18 лет назад

The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 ...

GHSA-769c-mjpc-3rqq

github

больше 3 лет назад

EPSS

Процентиль: 88%

0.04117

Низкий

7.8 High

CVSS2

Дефекты

NVD-CWE-Other