CVE-2008-1333

EUVD-2008-1340
Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by (1) the ast_verbose logging API call, or (2) the astman_append function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
asteriskopen_source
1.6.0_beta1:_beta1
asteriskopen_source
1.6.0_beta2:_beta2
asteriskopen_source
1.6.0_beta3:_beta3
asteriskopen_source
1.6.0_beta4:_beta4
asteriskopen_source
1.6.0_beta5:_beta5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
asterisk
bullseye
1:16.28.0~dfsg-0+deb11u4
fixed
bullseye (security)
1:16.28.0~dfsg-0+deb11u5
fixed
sarge
not-affected
sid
1:22.0.0~dfsg+~cs6.14.60671435-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
asterisk
dapper
ignored
edgy
ignored
feisty
ignored
gutsy
ignored
hardy
Fixed 1:1.4.17~dfsg-2ubuntu1
released
intrepid
Fixed 1:1.4.17~dfsg-2ubuntu1
released
jaunty
Fixed 1:1.4.17~dfsg-2ubuntu1
released
karmic
Fixed 1:1.4.17~dfsg-2ubuntu1
released
Common Weakness Enumeration
References
http://downloads.digium.com/pub/security/AST-2008-004.html
http://secunia.com/advisories/29426
http://secunia.com/advisories/29456
http://securitytracker.com/id?1019630
http://www.asterisk.org/node/48466
http://www.debian.org/security/2008/dsa-1525
http://www.securityfocus.com/archive/1/489823/100/0/threaded
http://www.securityfocus.com/bid/28311
http://www.vupen.com/english/advisories/2008/0928
https://exchange.xforce.ibmcloud.com/vulnerabilities/41301
http://downloads.digium.com/pub/security/AST-2008-004.html
http://secunia.com/advisories/29426
http://secunia.com/advisories/29456
http://securitytracker.com/id?1019630
http://www.asterisk.org/node/48466
http://www.debian.org/security/2008/dsa-1525
http://www.securityfocus.com/archive/1/489823/100/0/threaded
http://www.securityfocus.com/bid/28311
http://www.vupen.com/english/advisories/2008/0928
https://exchange.xforce.ibmcloud.com/vulnerabilities/41301