Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in the voicemail functionality in Asterisk 1.4.x before 1.4.13, when using IMAP storage, might allow (1) remote attackers to execute arbitrary code via a long combination of Content-type and Content-description headers, or (2) local users to execute arbitrary code via a long combination of astspooldir, voicemail context, and voicemail mailbox fields. NOTE: vector 2 requires write access to Asterisk configuration files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Digium Asterisk IMAP储存多个缓冲区溢出漏洞
Vulnerability Description
Asterisk 1.4.13版本之前的1.4.x版本的voicemail功能中存在多个缓冲区溢出,当运行IMAP储存时,(1) 远程攻击者可以借助一个超长的Content-type和Content-description页眉的结合体, 执行任意代码或(2) 本地用户可以借助一个超长的astspooldir, voicemail context, 和 voicemail mailbox 字段的结合体，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A