PT-2011-2394 · Digium · Asterisk Business Edition+1

Published 2011-01-20 · Updated 2020-07-15 · CVE-2011-0495

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions prior to 1.4.38.1 Asterisk Open Source versions prior to 1.4.39.1 Asterisk Open Source versions prior to 1.6.1.21 Asterisk Open Source versions prior to 1.6.2.15.1 Asterisk Open Source versions prior to 1.6.2.16.1 Asterisk Open Source versions prior to 1.8.1.2 Asterisk Open Source versions prior to 1.8.2 Asterisk Business Edition versions prior to C.3.6.2

Description The issue is a stack-based buffer overflow in the ast uri encode function. This occurs when the software is running in pedantic mode and allows remote authenticated users to execute arbitrary code via crafted caller ID data. The vulnerability can be exploited through vectors involving the SIP channel driver, the URIENCODE dialplan function, or the AGI dialplan function.

Recommendations For Asterisk Open Source versions prior to 1.4.38.1, update to version 1.4.38.1 or later. For Asterisk Open Source versions prior to 1.4.39.1, update to version 1.4.39.1 or later. For Asterisk Open Source versions prior to 1.6.1.21, update to version 1.6.1.21 or later. For Asterisk Open Source versions prior to 1.6.2.15.1, update to version 1.6.2.15.1 or later. For Asterisk Open Source versions prior to 1.6.2.16.1, update to version 1.6.2.16.1 or later. For Asterisk Open Source versions prior to 1.8.1.2, update to version 1.8.1.2 or later. For Asterisk Open Source versions prior to 1.8.2, update to version 1.8.2 or later. For Asterisk Business Edition versions prior to C.3.6.2, update to version C.3.6.2 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2011-0495

DSA-2171-1

Affected Products

Asterisk Business Edition

Asterisk Open Source

References · 20

• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053689.html · Vendor Advisory
• http://debian.org/security/2011/dsa-2171 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-0495 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0495 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0495 · Security Note
• http://downloads.asterisk.org/pub/security/AST-2011-001-1.6.2.diff · Vendor Advisory
• http://downloads.asterisk.org/pub/security/AST-2011-001.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-0495 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053713.html · Vendor Advisory
• http://secunia.com/advisories/42935 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64831 · Note
• http://secunia.com/advisories/43373 · Note
• http://securityfocus.com/archive/1/515781/100/0/threaded · Note
• http://vupen.com/english/advisories/2011/0449 · Note
• http://securityfocus.com/bid/45839 · Note