CyberSec.Space Logo
Back to CVE Browser

CVE-2011-1599

CRITICAL
9.0
CVSS Severity Score
EPSS Score0.1610%
EPSS Percentile2.63th
PublishedApr 27, 2011
Last ModifiedApr 29, 2026

Vulnerability Description

manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header.

Affected Platforms (CPE)

📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.1
📦
Digium

Asterisk

= 1.4.2
📦
Digium

Asterisk

= 1.4.3
📦
Digium

Asterisk

= 1.4.10
📦
Digium

Asterisk

= 1.4.10.1
📦
Digium

Asterisk

= 1.4.11
📦
Digium

Asterisk

= 1.4.12
📦
Digium

Asterisk

= 1.4.12.1
📦
Digium

Asterisk

= 1.4.13
📦
Digium

Asterisk

= 1.4.14
📦
Digium

Asterisk

= 1.4.15
📦
Digium

Asterisk

= 1.4.16
📦
Digium

Asterisk

= 1.4.16.1
📦
Digium

Asterisk

= 1.4.16.2
📦
Digium

Asterisk

= 1.4.17
📦
Digium

Asterisk

= 1.4.18
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19.1
📦
Digium

Asterisk

= 1.4.19.2
📦
Digium

Asterisk

= 1.4.20
📦
Digium

Asterisk

= 1.4.20
📦
Digium

Asterisk

= 1.4.20
📦
Digium

Asterisk

= 1.4.20
📦
Digium

Asterisk

= 1.4.20.1
📦
Digium

Asterisk

= 1.4.21
📦
Digium

Asterisk

= 1.4.21
📦
Digium

Asterisk

= 1.4.21
📦
Digium

Asterisk

= 1.4.21.1
📦
Digium

Asterisk

= 1.4.21.2
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22.1
📦
Digium

Asterisk

= 1.4.22.2
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23.1
📦
Digium

Asterisk

= 1.4.23.2
📦
Digium

Asterisk

= 1.4.24
📦
Digium

Asterisk

= 1.4.24
📦
Digium

Asterisk

= 1.4.24.1
📦
Digium

Asterisk

= 1.4.25
📦
Digium

Asterisk

= 1.4.25
📦
Digium

Asterisk

= 1.4.25.1
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26.1
📦
Digium

Asterisk

= 1.4.26.2
📦
Digium

Asterisk

= 1.4.26.3
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27.1
📦
Digium

Asterisk

= 1.4.28
📦
Digium

Asterisk

= 1.4.28
📦
Digium

Asterisk

= 1.4.29
📦
Digium

Asterisk

= 1.4.29
📦
Digium

Asterisk

= 1.4.29.1
📦
Digium

Asterisk

= 1.4.30
📦
Digium

Asterisk

= 1.4.30
📦
Digium

Asterisk

= 1.4.30
📦
Digium

Asterisk

= 1.4.31
📦
Digium

Asterisk

= 1.4.31
📦
Digium

Asterisk

= 1.4.31
📦
Digium

Asterisk

= 1.4.32
📦
Digium

Asterisk

= 1.4.32
📦
Digium

Asterisk

= 1.4.33
📦
Digium

Asterisk

= 1.4.33
📦
Digium

Asterisk

= 1.4.33
📦
Digium

Asterisk

= 1.4.33.1
📦
Digium

Asterisk

= 1.4.34
📦
Digium

Asterisk

= 1.4.34
📦
Digium

Asterisk

= 1.4.34
📦
Digium

Asterisk

= 1.4.35
📦
Digium

Asterisk

= 1.4.35
📦
Digium

Asterisk

= 1.4.36
📦
Digium

Asterisk

= 1.4.36
📦
Digium

Asterisk

= 1.4.37
📦
Digium

Asterisk

= 1.4.37
📦
Digium

Asterisk

= 1.4.38
📦
Digium

Asterisk

= 1.4.38
📦
Digium

Asterisk

= 1.4.39
📦
Digium

Asterisk

= 1.4.39
📦
Digium

Asterisk

= 1.4.39.1
📦
Digium

Asterisk

= 1.4.39.2
📦
Digium

Asterisk

= 1.4.40
📦
Digium

Asterisk

= 1.4.40
📦
Digium

Asterisk

= 1.4.40
📦
Digium

Asterisk

= 1.4.40
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.1
📦
Digium

Asterisk

= 1.6.2.1
📦
Digium

Asterisk

= 1.6.2.2
📦
Digium

Asterisk

= 1.6.2.3
📦
Digium

Asterisk

= 1.6.2.4
📦
Digium

Asterisk

= 1.6.2.5
📦
Digium

Asterisk

= 1.6.2.6
📦
Digium

Asterisk

= 1.6.2.6
📦
Digium

Asterisk

= 1.6.2.6
📦
Digium

Asterisk

= 1.6.2.15
📦
Digium

Asterisk

= 1.6.2.16
📦
Digium

Asterisk

= 1.6.2.16
📦
Digium

Asterisk

= 1.6.2.16.1
📦
Digium

Asterisk

= 1.6.2.16.2
📦
Digium

Asterisk

= 1.6.2.17
📦
Digium

Asterisk

= 1.6.2.17
📦
Digium

Asterisk

= 1.6.2.17
📦
Digium

Asterisk

= 1.6.2.17
📦
Digium

Asterisk

= 1.6.2.17.1
📦
Digium

Asterisk

= 1.6.2.17.2
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.1
📦
Digium

Asterisk

= 1.8.1
📦
Digium

Asterisk

= 1.8.1.1
📦
Digium

Asterisk

= 1.8.1.2
📦
Digium

Asterisk

= 1.8.2
📦
Digium

Asterisk

= 1.8.2.1
📦
Digium

Asterisk

= 1.8.2.2
📦
Digium

Asterisk

= 1.8.2.3
📦
Digium

Asterisk

= 1.8.2.4
📦
Digium

Asterisk

= 1.8.3
📦
Digium

Asterisk

= 1.8.3
📦
Digium

Asterisk

= 1.8.3
📦
Digium

Asterisk

= 1.8.3
📦
Digium

Asterisk

= 1.8.3.1
📦
Digium

Asterisk

= 1.8.3.2
📦
Digium

Asterisk

= c.1.0
📦
Digium

Asterisk

= c.1.0
📦
Digium

Asterisk

= c.1.6
📦
Digium

Asterisk

= c.1.6.1
📦
Digium

Asterisk

= c.1.6.2
📦
Digium

Asterisk

= c.1.8.0
📦
Digium

Asterisk

= c.1.8.1
📦
Digium

Asterisk

= c.2.3
📦
Digium

Asterisk

= c.3.0
📦
Digium

Asterisk

= c.3.1.0
📦
Digium

Asterisk

= c.3.1.1
📦
Digium

Asterisk

= c.3.2.2
📦
Digium

Asterisk

= c.3.2.3
📦
Digium

Asterisk

= c.3.3.2
📦
Digium

Asterisk

= c.3.6.2
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.1
📦
Digium

Asterisk

= 1.6.1.2
📦
Digium

Asterisk

= 1.6.1.3
📦
Digium

Asterisk

= 1.6.1.4
📦
Digium

Asterisk

= 1.6.1.5
📦
Digium

Asterisk

= 1.6.1.5
📦
Digium

Asterisk

= 1.6.1.6
📦
Digium

Asterisk

= 1.6.1.7
📦
Digium

Asterisk

= 1.6.1.7
📦
Digium

Asterisk

= 1.6.1.8
📦
Digium

Asterisk

= 1.6.1.9
📦
Digium

Asterisk

= 1.6.1.10
📦
Digium

Asterisk

= 1.6.1.10
📦
Digium

Asterisk

= 1.6.1.10
📦
Digium

Asterisk

= 1.6.1.10
📦
Digium

Asterisk

= 1.6.1.11
📦
Digium

Asterisk

= 1.6.1.12
📦
Digium

Asterisk

= 1.6.1.12
📦
Digium

Asterisk

= 1.6.1.13
📦
Digium

Asterisk

= 1.6.1.13
📦
Digium

Asterisk

= 1.6.1.14
📦
Digium

Asterisk

= 1.6.1.15
📦
Digium

Asterisk

= 1.6.1.16
📦
Digium

Asterisk

= 1.6.1.17
📦
Digium

Asterisk

= 1.6.1.18
📦
Digium

Asterisk

= 1.6.1.18
📦
Digium

Asterisk

= 1.6.1.18
📦
Digium

Asterisk

= 1.6.1.19
📦
Digium

Asterisk

= 1.6.1.19
📦
Digium

Asterisk

= 1.6.1.19
📦
Digium

Asterisk

= 1.6.1.19
📦
Digium

Asterisk

= 1.6.1.20
📦
Digium

Asterisk

= 1.6.1.20
📦
Digium

Asterisk

= 1.6.1.20
📦
Digium

Asterisk

= 1.6.1.21
📦
Digium

Asterisk

= 1.6.1.22
📦
Digium

Asterisk

= 1.6.1.23
📦
Digium

Asterisk

= 1.6.1.24

References & Advisories

🔗 http://downloads.digium.com/pub/security/AST-2011-006.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058922.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059702.html
🔗 http://openwall.com/lists/oss-security/2011/04/22/6
🔗 http://secunia.com/advisories/44197
🔗 http://secunia.com/advisories/44529
🔗 http://securitytracker.com/id?1025433
🔗 http://www.debian.org/security/2011/dsa-2225

Related Vulnerabilities

CVE-2007-248810.0

The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attacke...

CVE-2017-141009.8

In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13...

CVE-2008-13909.3

The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x b...

CVE-2007-37629.3

Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edit...