CVE-2008-1333

Published Mar 20, 2008

Last updated 6 years ago

Overview

Description: Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by (1) the ast_verbose logging API call, or (2) the astman_append function.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5.8
Impact score: 4.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-134

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:asterisk:open_source:1.6.0_beta1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0ABFFC6C-C814-49A4-872E-3B8DC8AB1E6F"
          },
          {
            "criteria": "cpe:2.3:a:asterisk:open_source:1.6.0_beta2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "07532423-02E0-424A-B84A-4997BF152B9F"
          },
          {
            "criteria": "cpe:2.3:a:asterisk:open_source:1.6.0_beta3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "916BC7DD-8EB8-4782-BE9C-9927EB3E66FB"
          },
          {
            "criteria": "cpe:2.3:a:asterisk:open_source:1.6.0_beta4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3F0FFA4-B9AD-4934-87BC-F765AD0A16B1"
          },
          {
            "criteria": "cpe:2.3:a:asterisk:open_source:1.6.0_beta5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7B842E24-58B3-4630-9FC2-9DC0BA356D07"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References