CVE Vulnerabilities

CVE-2012-4737

Published: Aug 31, 2012 | Modified: Apr 19, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
LOW

channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certain uses of peer credentials, which allows remote authenticated users to bypass intended outbound-call restrictions by leveraging the availability of these credentials.

Affected Software

Name Vendor Start Version End Version
Asterisk Digium 1.8.0 (including) 1.8.0 (including)
Asterisk Digium 1.8.0-beta1 (including) 1.8.0-beta1 (including)
Asterisk Digium 1.8.0-beta2 (including) 1.8.0-beta2 (including)
Asterisk Digium 1.8.0-beta3 (including) 1.8.0-beta3 (including)
Asterisk Digium 1.8.0-beta4 (including) 1.8.0-beta4 (including)
Asterisk Digium 1.8.0-beta5 (including) 1.8.0-beta5 (including)
Asterisk Digium 1.8.0-rc2 (including) 1.8.0-rc2 (including)
Asterisk Digium 1.8.0-rc3 (including) 1.8.0-rc3 (including)
Asterisk Digium 1.8.0-rc4 (including) 1.8.0-rc4 (including)
Asterisk Digium 1.8.0-rc5 (including) 1.8.0-rc5 (including)
Asterisk Digium 1.8.1 (including) 1.8.1 (including)
Asterisk Digium 1.8.1-rc1 (including) 1.8.1-rc1 (including)
Asterisk Digium 1.8.1.1 (including) 1.8.1.1 (including)
Asterisk Digium 1.8.1.2 (including) 1.8.1.2 (including)
Asterisk Digium 1.8.2 (including) 1.8.2 (including)
Asterisk Digium 1.8.2.1 (including) 1.8.2.1 (including)
Asterisk Digium 1.8.2.2 (including) 1.8.2.2 (including)
Asterisk Digium 1.8.2.3 (including) 1.8.2.3 (including)
Asterisk Digium 1.8.2.4 (including) 1.8.2.4 (including)
Asterisk Digium 1.8.3 (including) 1.8.3 (including)
Asterisk Digium 1.8.3-rc1 (including) 1.8.3-rc1 (including)
Asterisk Digium 1.8.3-rc2 (including) 1.8.3-rc2 (including)
Asterisk Digium 1.8.3-rc3 (including) 1.8.3-rc3 (including)
Asterisk Digium 1.8.3.1 (including) 1.8.3.1 (including)
Asterisk Digium 1.8.3.2 (including) 1.8.3.2 (including)
Asterisk Digium 1.8.3.3 (including) 1.8.3.3 (including)
Asterisk Digium 1.8.4 (including) 1.8.4 (including)
Asterisk Digium 1.8.4-rc1 (including) 1.8.4-rc1 (including)
Asterisk Digium 1.8.4-rc2 (including) 1.8.4-rc2 (including)
Asterisk Digium 1.8.4-rc3 (including) 1.8.4-rc3 (including)
Asterisk Digium 1.8.4.1 (including) 1.8.4.1 (including)
Asterisk Digium 1.8.4.2 (including) 1.8.4.2 (including)
Asterisk Digium 1.8.4.3 (including) 1.8.4.3 (including)
Asterisk Digium 1.8.4.4 (including) 1.8.4.4 (including)
Asterisk Digium 1.8.5 (including) 1.8.5 (including)
Asterisk Digium 1.8.5-rc1 (including) 1.8.5-rc1 (including)
Asterisk Digium 1.8.5.0 (including) 1.8.5.0 (including)
Asterisk Digium 1.8.6.0 (including) 1.8.6.0 (including)
Asterisk Digium 1.8.6.0-rc1 (including) 1.8.6.0-rc1 (including)
Asterisk Digium 1.8.6.0-rc2 (including) 1.8.6.0-rc2 (including)
Asterisk Digium 1.8.6.0-rc3 (including) 1.8.6.0-rc3 (including)
Asterisk Digium 1.8.7.0 (including) 1.8.7.0 (including)
Asterisk Digium 1.8.7.0-rc1 (including) 1.8.7.0-rc1 (including)
Asterisk Digium 1.8.7.0-rc2 (including) 1.8.7.0-rc2 (including)
Asterisk Digium 1.8.7.1 (including) 1.8.7.1 (including)
Asterisk Digium 1.8.8.0 (including) 1.8.8.0 (including)
Asterisk Digium 1.8.8.0-rc1 (including) 1.8.8.0-rc1 (including)
Asterisk Digium 1.8.8.0-rc2 (including) 1.8.8.0-rc2 (including)
Asterisk Digium 1.8.8.0-rc3 (including) 1.8.8.0-rc3 (including)
Asterisk Digium 1.8.8.0-rc4 (including) 1.8.8.0-rc4 (including)
Asterisk Digium 1.8.8.0-rc5 (including) 1.8.8.0-rc5 (including)
Asterisk Digium 1.8.8.1 (including) 1.8.8.1 (including)
Asterisk Digium 1.8.8.2 (including) 1.8.8.2 (including)
Asterisk Digium 1.8.9.0 (including) 1.8.9.0 (including)
Asterisk Digium 1.8.9.0-rc1 (including) 1.8.9.0-rc1 (including)
Asterisk Digium 1.8.9.0-rc2 (including) 1.8.9.0-rc2 (including)
Asterisk Digium 1.8.9.0-rc3 (including) 1.8.9.0-rc3 (including)
Asterisk Digium 1.8.9.1 (including) 1.8.9.1 (including)
Asterisk Digium 1.8.9.2 (including) 1.8.9.2 (including)
Asterisk Digium 1.8.9.3 (including) 1.8.9.3 (including)
Asterisk Digium 1.8.10.0 (including) 1.8.10.0 (including)
Asterisk Digium 1.8.10.0-rc1 (including) 1.8.10.0-rc1 (including)
Asterisk Digium 1.8.10.0-rc2 (including) 1.8.10.0-rc2 (including)
Asterisk Digium 1.8.10.0-rc3 (including) 1.8.10.0-rc3 (including)
Asterisk Digium 1.8.10.0-rc4 (including) 1.8.10.0-rc4 (including)
Asterisk Digium 1.8.10.1 (including) 1.8.10.1 (including)
Asterisk Digium 1.8.11.0 (including) 1.8.11.0 (including)
Asterisk Digium 1.8.11.0-rc2 (including) 1.8.11.0-rc2 (including)
Asterisk Digium 1.8.11.0-rc3 (including) 1.8.11.0-rc3 (including)
Asterisk Digium 1.8.11.1 (including) 1.8.11.1 (including)
Asterisk Digium 1.8.12 (including) 1.8.12 (including)
Asterisk Digium 1.8.12.0 (including) 1.8.12.0 (including)
Asterisk Digium 1.8.12.0-rc1 (including) 1.8.12.0-rc1 (including)
Asterisk Digium 1.8.12.0-rc2 (including) 1.8.12.0-rc2 (including)
Asterisk Digium 1.8.12.0-rc3 (including) 1.8.12.0-rc3 (including)
Asterisk Digium 1.8.13.0 (including) 1.8.13.0 (including)
Asterisk Digium 1.8.13.0-rc1 (including) 1.8.13.0-rc1 (including)
Asterisk Digium 1.8.13.0-rc2 (including) 1.8.13.0-rc2 (including)
Asterisk Digium 1.8.13.1 (including) 1.8.13.1 (including)
Asterisk Digium 1.8.14.0-rc1 (including) 1.8.14.0-rc1 (including)
Asterisk Digium 1.8.14.0-rc2 (including) 1.8.14.0-rc2 (including)
Asterisk Digium 1.8.14.1 (including) 1.8.14.1 (including)
Asterisk Digium 1.8.15.0 (including) 1.8.15.0 (including)
Asterisk Digium 1.8.15.0-rc1 (including) 1.8.15.0-rc1 (including)
Asterisk Ubuntu hardy *
Asterisk Ubuntu lucid *
Asterisk Ubuntu natty *
Asterisk Ubuntu oneiric *
Asterisk Ubuntu precise *
Asterisk Ubuntu upstream *

References