Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Asterisk 安全漏洞
Vulnerability Description
Asterisk是一款PBX系统的软件，运行在Linux系统上，支持使用SIP、IAX、H323协议进行IP通话。 Asterisk 1.0.7 版本存在安全漏洞。当启用"write = command"选项时，远程攻击者可通过命令后附加tab字符，再包含两个引号当方式，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A