CVE-2006-4346

published 2006-08-24

CVE-2006-4346: Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to (1) execute…

Priority P3 35 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to (1) execute code via format string specifiers or (2) overwrite files via directory traversals involving unspecified vectors, as demonstrated by the CALLERIDNAME variable.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	asterisk	< asterisk 1:1.2.11.dfsg-1 (bullseye)	asterisk 1:1.2.11.dfsg-1 (bullseye)
digium	asterisk	—	—
digium	asterisk	>= 0 < 1:1.2.11.dfsg-1	1:1.2.11.dfsg-1

CVSS provenance

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

osv 7.5 HIGH

vendor_debian 7.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.