PT-2010-2437 · Digium · Asterisk Business Edition+1

Publicado 2010-02-23 · Atualizado 2018-10-10 · CVE-2010-0685

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.2.x through 1.6.x Asterisk Business Edition versions B.x.x through C.x.x

Description The dialplan functionality in Asterisk allows context-dependent attackers to inject strings into the dialplan using metacharacters that are injected when the ${EXTEN} channel variable is expanded. This can be demonstrated using the Dial application to process a crafted SIP INVITE message, potentially adding an unintended outgoing channel leg.

Recommendations For Asterisk Open Source versions 1.2.x through 1.6.x, consider implementing filtering functionality to prevent metacharacter injection when using the ${EXTEN} channel variable. For Asterisk Business Edition versions B.x.x through C.x.x, consider implementing filtering functionality to prevent metacharacter injection when using the ${EXTEN} channel variable. As a temporary workaround, consider restricting the use of the Dial application with crafted SIP INVITE messages until a more comprehensive solution is available.

Exploit

Correção

Identificadores relacionados

CVE-2010-0685

Produtos afetados

Asterisk Business Edition

Asterisk Open Source

Referências · 14

• 🔥 http://downloads.digium.com/pub/security/AST-2010-002.html · Exploit
• http://securityfocus.com/archive/1/509608/100/0/threaded · Nota
• http://secunia.com/advisories/39096 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-0685 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0685 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56397 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0685 · Aviso do Fabricante
• http://securitytracker.com/id?1023637 · Nota
• http://vupen.com/english/advisories/2010/0439 · Aviso do Fabricante
• http://svn.asterisk.org/svn/asterisk/branches/1.2/README-SERIOUSLY.bestpractices.txt · Nota
• https://osv.dev/vulnerability/CVE-2010-0685 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0685 · Nota
• http://secunia.com/advisories/38641 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037679.html · Aviso do Fabricante