CVE-2007-6430

Опубликовано: 20 дек. 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations ("realtime") and host-based authentication, does not check the IP address when the username is correct and there is no password, which allows remote attackers to bypass authentication using a valid username.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0beta7:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.0beta1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.0beta2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.9:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.6:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.7:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.8:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.9:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.4beta:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00541

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2007-6430

ubuntu

около 18 лет назад

CVE-2007-6430

debian

около 18 лет назад

Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and ...

GHSA-3h3j-j53r-q78w

github

почти 4 года назад

EPSS

Процентиль: 67%

0.00541

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-287