ByteOS Network

NVD Vulnerability Details :

CVE-2006-4346

Deferred

Source-cve@mitre.org

Published At-24 Aug, 2006 | 20:04

Updated At-03 Apr, 2025 | 01:03

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to (1) execute code via format string specifiers or (2) overwrite files via directory traversals involving unspecified vectors, as demonstrated by the CALLERIDNAME variable.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Digium, Inc.

>>asterisk>>1.2.10

cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://labs.musecurity.com/advisories/MU-200608-01.txt	cve@mitre.org	Patch Vendor Advisory
http://secunia.com/advisories/22651	cve@mitre.org	N/A
http://securitytracker.com/id?1016742	cve@mitre.org	Patch
http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/444322/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/19683	cve@mitre.org	Patch
http://www.sineapps.com/news.php?rssid=1448	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2006/3372	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/28544	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/28564	cve@mitre.org	N/A
http://labs.musecurity.com/advisories/MU-200608-01.txt	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://secunia.com/advisories/22651	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1016742	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/444322/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/19683	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.sineapps.com/news.php?rssid=1448	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2006/3372	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/28544	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/28564	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History