CyberSec.Space Logo
返回 CVE 浏览器

CVE-2011-1599

CRITICAL
9.0
CVSS Severity Score
EPSS Score0.1610%
EPSS Percentile2.63th
Published2011年4月27日
Last Modified2026年4月29日

Vulnerability Description

manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header.

Affected Platforms (CPE)

📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.0
📦
Digium

Asterisk

= 1.4.1
📦
Digium

Asterisk

= 1.4.2
📦
Digium

Asterisk

= 1.4.3
📦
Digium

Asterisk

= 1.4.10
📦
Digium

Asterisk

= 1.4.10.1
📦
Digium

Asterisk

= 1.4.11
📦
Digium

Asterisk

= 1.4.12
📦
Digium

Asterisk

= 1.4.12.1
📦
Digium

Asterisk

= 1.4.13
📦
Digium

Asterisk

= 1.4.14
📦
Digium

Asterisk

= 1.4.15
📦
Digium

Asterisk

= 1.4.16
📦
Digium

Asterisk

= 1.4.16.1
📦
Digium

Asterisk

= 1.4.16.2
📦
Digium

Asterisk

= 1.4.17
📦
Digium

Asterisk

= 1.4.18
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19
📦
Digium

Asterisk

= 1.4.19.1
📦
Digium

Asterisk

= 1.4.19.2
📦
Digium

Asterisk

= 1.4.20
📦
Digium

Asterisk

= 1.4.20
📦
Digium

Asterisk

= 1.4.20
📦
Digium

Asterisk

= 1.4.20
📦
Digium

Asterisk

= 1.4.20.1
📦
Digium

Asterisk

= 1.4.21
📦
Digium

Asterisk

= 1.4.21
📦
Digium

Asterisk

= 1.4.21
📦
Digium

Asterisk

= 1.4.21.1
📦
Digium

Asterisk

= 1.4.21.2
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22
📦
Digium

Asterisk

= 1.4.22.1
📦
Digium

Asterisk

= 1.4.22.2
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23
📦
Digium

Asterisk

= 1.4.23.1
📦
Digium

Asterisk

= 1.4.23.2
📦
Digium

Asterisk

= 1.4.24
📦
Digium

Asterisk

= 1.4.24
📦
Digium

Asterisk

= 1.4.24.1
📦
Digium

Asterisk

= 1.4.25
📦
Digium

Asterisk

= 1.4.25
📦
Digium

Asterisk

= 1.4.25.1
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26
📦
Digium

Asterisk

= 1.4.26.1
📦
Digium

Asterisk

= 1.4.26.2
📦
Digium

Asterisk

= 1.4.26.3
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27
📦
Digium

Asterisk

= 1.4.27.1
📦
Digium

Asterisk

= 1.4.28
📦
Digium

Asterisk

= 1.4.28
📦
Digium

Asterisk

= 1.4.29
📦
Digium

Asterisk

= 1.4.29
📦
Digium

Asterisk

= 1.4.29.1
📦
Digium

Asterisk

= 1.4.30
📦
Digium

Asterisk

= 1.4.30
📦
Digium

Asterisk

= 1.4.30
📦
Digium

Asterisk

= 1.4.31
📦
Digium

Asterisk

= 1.4.31
📦
Digium

Asterisk

= 1.4.31
📦
Digium

Asterisk

= 1.4.32
📦
Digium

Asterisk

= 1.4.32
📦
Digium

Asterisk

= 1.4.33
📦
Digium

Asterisk

= 1.4.33
📦
Digium

Asterisk

= 1.4.33
📦
Digium

Asterisk

= 1.4.33.1
📦
Digium

Asterisk

= 1.4.34
📦
Digium

Asterisk

= 1.4.34
📦
Digium

Asterisk

= 1.4.34
📦
Digium

Asterisk

= 1.4.35
📦
Digium

Asterisk

= 1.4.35
📦
Digium

Asterisk

= 1.4.36
📦
Digium

Asterisk

= 1.4.36
📦
Digium

Asterisk

= 1.4.37
📦
Digium

Asterisk

= 1.4.37
📦
Digium

Asterisk

= 1.4.38
📦
Digium

Asterisk

= 1.4.38
📦
Digium

Asterisk

= 1.4.39
📦
Digium

Asterisk

= 1.4.39
📦
Digium

Asterisk

= 1.4.39.1
📦
Digium

Asterisk

= 1.4.39.2
📦
Digium

Asterisk

= 1.4.40
📦
Digium

Asterisk

= 1.4.40
📦
Digium

Asterisk

= 1.4.40
📦
Digium

Asterisk

= 1.4.40
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.0
📦
Digium

Asterisk

= 1.6.2.1
📦
Digium

Asterisk

= 1.6.2.1
📦
Digium

Asterisk

= 1.6.2.2
📦
Digium

Asterisk

= 1.6.2.3
📦
Digium

Asterisk

= 1.6.2.4
📦
Digium

Asterisk

= 1.6.2.5
📦
Digium

Asterisk

= 1.6.2.6
📦
Digium

Asterisk

= 1.6.2.6
📦
Digium

Asterisk

= 1.6.2.6
📦
Digium

Asterisk

= 1.6.2.15
📦
Digium

Asterisk

= 1.6.2.16
📦
Digium

Asterisk

= 1.6.2.16
📦
Digium

Asterisk

= 1.6.2.16.1
📦
Digium

Asterisk

= 1.6.2.16.2
📦
Digium

Asterisk

= 1.6.2.17
📦
Digium

Asterisk

= 1.6.2.17
📦
Digium

Asterisk

= 1.6.2.17
📦
Digium

Asterisk

= 1.6.2.17
📦
Digium

Asterisk

= 1.6.2.17.1
📦
Digium

Asterisk

= 1.6.2.17.2
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.0
📦
Digium

Asterisk

= 1.8.1
📦
Digium

Asterisk

= 1.8.1
📦
Digium

Asterisk

= 1.8.1.1
📦
Digium

Asterisk

= 1.8.1.2
📦
Digium

Asterisk

= 1.8.2
📦
Digium

Asterisk

= 1.8.2.1
📦
Digium

Asterisk

= 1.8.2.2
📦
Digium

Asterisk

= 1.8.2.3
📦
Digium

Asterisk

= 1.8.2.4
📦
Digium

Asterisk

= 1.8.3
📦
Digium

Asterisk

= 1.8.3
📦
Digium

Asterisk

= 1.8.3
📦
Digium

Asterisk

= 1.8.3
📦
Digium

Asterisk

= 1.8.3.1
📦
Digium

Asterisk

= 1.8.3.2
📦
Digium

Asterisk

= c.1.0
📦
Digium

Asterisk

= c.1.0
📦
Digium

Asterisk

= c.1.6
📦
Digium

Asterisk

= c.1.6.1
📦
Digium

Asterisk

= c.1.6.2
📦
Digium

Asterisk

= c.1.8.0
📦
Digium

Asterisk

= c.1.8.1
📦
Digium

Asterisk

= c.2.3
📦
Digium

Asterisk

= c.3.0
📦
Digium

Asterisk

= c.3.1.0
📦
Digium

Asterisk

= c.3.1.1
📦
Digium

Asterisk

= c.3.2.2
📦
Digium

Asterisk

= c.3.2.3
📦
Digium

Asterisk

= c.3.3.2
📦
Digium

Asterisk

= c.3.6.2
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.0
📦
Digium

Asterisk

= 1.6.1.1
📦
Digium

Asterisk

= 1.6.1.2
📦
Digium

Asterisk

= 1.6.1.3
📦
Digium

Asterisk

= 1.6.1.4
📦
Digium

Asterisk

= 1.6.1.5
📦
Digium

Asterisk

= 1.6.1.5
📦
Digium

Asterisk

= 1.6.1.6
📦
Digium

Asterisk

= 1.6.1.7
📦
Digium

Asterisk

= 1.6.1.7
📦
Digium

Asterisk

= 1.6.1.8
📦
Digium

Asterisk

= 1.6.1.9
📦
Digium

Asterisk

= 1.6.1.10
📦
Digium

Asterisk

= 1.6.1.10
📦
Digium

Asterisk

= 1.6.1.10
📦
Digium

Asterisk

= 1.6.1.10
📦
Digium

Asterisk

= 1.6.1.11
📦
Digium

Asterisk

= 1.6.1.12
📦
Digium

Asterisk

= 1.6.1.12
📦
Digium

Asterisk

= 1.6.1.13
📦
Digium

Asterisk

= 1.6.1.13
📦
Digium

Asterisk

= 1.6.1.14
📦
Digium

Asterisk

= 1.6.1.15
📦
Digium

Asterisk

= 1.6.1.16
📦
Digium

Asterisk

= 1.6.1.17
📦
Digium

Asterisk

= 1.6.1.18
📦
Digium

Asterisk

= 1.6.1.18
📦
Digium

Asterisk

= 1.6.1.18
📦
Digium

Asterisk

= 1.6.1.19
📦
Digium

Asterisk

= 1.6.1.19
📦
Digium

Asterisk

= 1.6.1.19
📦
Digium

Asterisk

= 1.6.1.19
📦
Digium

Asterisk

= 1.6.1.20
📦
Digium

Asterisk

= 1.6.1.20
📦
Digium

Asterisk

= 1.6.1.20
📦
Digium

Asterisk

= 1.6.1.21
📦
Digium

Asterisk

= 1.6.1.22
📦
Digium

Asterisk

= 1.6.1.23
📦
Digium

Asterisk

= 1.6.1.24

References & Advisories

🔗 http://downloads.digium.com/pub/security/AST-2011-006.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058922.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059702.html
🔗 http://openwall.com/lists/oss-security/2011/04/22/6
🔗 http://secunia.com/advisories/44197
🔗 http://secunia.com/advisories/44529
🔗 http://securitytracker.com/id?1025433
🔗 http://www.debian.org/security/2011/dsa-2225

相关漏洞威胁

CVE-2007-248810.0

The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attacke...

CVE-2017-141009.8

In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13...

CVE-2008-13909.3

The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x b...

CVE-2007-37629.3

Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edit...