CVE Vulnerabilities

CVE-2007-2294

Published: Apr 26, 2007 | Modified: Oct 16, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference.

Affected Software

Name Vendor Start Version End Version
Asterisk Asterisk 1.2.0_beta1 1.2.0_beta1
Asterisk Asterisk 1.2.0_beta2 1.2.0_beta2
Asterisk Asterisk 1.2.5 1.2.5
Asterisk Asterisk 1.2.6 1.2.6
Asterisk Asterisk 1.2.7 1.2.7
Asterisk Asterisk 1.2.8 1.2.8
Asterisk Asterisk 1.2.9 1.2.9
Asterisk Asterisk 1.2.10 1.2.10
Asterisk Asterisk 1.2.11 1.2.11
Asterisk Asterisk 1.2.12 1.2.12
Asterisk Asterisk 1.2.13 1.2.13
Asterisk Asterisk 1.2.14 1.2.14
Asterisk Asterisk 1.2.15 1.2.15
Asterisk Asterisk 1.2.16 1.2.16
Asterisk Asterisk 1.2.17 1.2.17
Asterisk Asterisk 1.4.1 1.4.1
Asterisk Asterisk 1.4.2 1.4.2
Asterisk Asterisk 1.4_beta 1.4_beta
Asterisk Ubuntu dapper *
Asterisk Ubuntu devel *
Asterisk Ubuntu edgy *
Asterisk Ubuntu feisty *
Asterisk Ubuntu gutsy *
Asterisk Ubuntu hardy *
Asterisk Ubuntu intrepid *
Asterisk Ubuntu jaunty *
Asterisk Ubuntu karmic *
Asterisk Ubuntu upstream *

References