CVE-2007-2294

The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:asterisk:asterisk:1.2.0_beta1:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.0_beta2:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.9:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.10:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.12:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.13:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.14:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.15:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.16:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.2.17:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:asterisk:asterisk:1.4_beta:*:*:*:*:*:*:*

History

21 Nov 2024, 00:30

Type Values Removed Values Added
References () http://secunia.com/advisories/24977 - Patch, Vendor Advisory () http://secunia.com/advisories/24977 - Patch, Vendor Advisory
References () http://secunia.com/advisories/25582 - () http://secunia.com/advisories/25582 -
References () http://securityreason.com/securityalert/2646 - () http://securityreason.com/securityalert/2646 -
References () http://www.asterisk.org/files/ASA-2007-012.pdf - () http://www.asterisk.org/files/ASA-2007-012.pdf -
References () http://www.debian.org/security/2007/dsa-1358 - () http://www.debian.org/security/2007/dsa-1358 -
References () http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - () http://www.novell.com/linux/security/advisories/2007_34_asterisk.html -
References () http://www.osvdb.org/35369 - () http://www.osvdb.org/35369 -
References () http://www.securityfocus.com/archive/1/466911/100/0/threaded - () http://www.securityfocus.com/archive/1/466911/100/0/threaded -
References () http://www.securityfocus.com/bid/23649 - () http://www.securityfocus.com/bid/23649 -
References () http://www.securitytracker.com/id?1017955 - () http://www.securitytracker.com/id?1017955 -
References () http://www.vupen.com/english/advisories/2007/1534 - () http://www.vupen.com/english/advisories/2007/1534 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/33886 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/33886 -

Information

Published : 2007-04-26 20:19

Updated : 2024-11-21 00:30


NVD link : CVE-2007-2294

Mitre link : CVE-2007-2294

CVE.ORG link : CVE-2007-2294


JSON object : View

Products Affected

asterisk

  • asterisk