CVE-2014-4046

Опубликовано: 17 июн. 2014

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action.

Комментарий

Per: http://cwe.mitre.org/data/definitions/77.html

"CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')"

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:digium:asterisk:11.0.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.0.0:beta1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.0.0:beta2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.0.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.0.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.0.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.0.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.1.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.1.0:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.1.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.1.2:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.2.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.3.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.3.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.4.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.4.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.4.0:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.5.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.5.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.8.0:-:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.8.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.8.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.8.0:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.8.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.9.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.9.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.9.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.10.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:11.10.0:rc1:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:digium:asterisk:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.1.0:-:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.1.0:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.2.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.2.0:rc2:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.2.0:rc3:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.3.0:*:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.3.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:asterisk:12.3.0:rc2:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc1:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc2:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:11.6.0:-:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:11.6.0:rc1:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:11.6.0:rc2:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01378

Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2014-4046

ubuntu

больше 11 лет назад

CVE-2014-4046

debian

больше 11 лет назад

Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Ce ...

GHSA-w674-3mq5-fw7c

github

больше 3 лет назад

EPSS

Процентиль: 80%

0.01378

Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other