CVE-2014-8418 in Asterisk
Zusammenfassung (Englisch)
The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before 1.8.28-cert8 and 11.6 before 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protocol, as demonstrated by the AMI protocol.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
22.10.2014
Veröffentlichung
24.11.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 68263 | Digium Asterisk DB Dialplan Function erweiterte Rechte | 264 | Unbewiesen | Offizieller Fix | CVE-2014-8418 |