CVE-2011-0495: CVE-2011-0495

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-0495

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary code via crafted caller ID data in vectors involving the (1) SIP channel driver, (2) URIENCODE dialplan function, or (3) AGI dialplan function.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Digium Asterisk Open Source ast_uri_encode函数栈缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Digium Asterisk是美国Digium公司的一套开源的电话交换机（PBX）系统软件。该软件支持语音信箱、多方语音会议、交互式语音应答(IVR)等。当在pedantic模式下运行时，Asterisk Open Source 1.4.38.1之前版本，1.4.39.1，1.6.1.21，1.6.2.15.1，1.6.2.16.1，1.8.1.2，1.8.2版本；以及Business Edition C.3.6.2之前版本的main/utils.c中的ast_uri_encode函数中存在基于栈的缓

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2011-0495

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2011-0495

Please Login to view more intelligence information

http://downloads.asterisk.org/pub/security/AST-2011-001.htmlx_refsource_CONFIRM
http://downloads.asterisk.org/pub/security/AST-2011-001-1.6.2.diffx_refsource_MISC
http://secunia.com/advisories/42935third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/70518vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/43119third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/43373third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/45839vdb-entryx_refsource_BID
http://www.debian.org/security/2011/dsa-2171vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2011/0281vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2011/0159vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2011/0449vdb-entryx_refsource_VUPEN
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053689.htmlvendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053713.htmlvendor-advisoryx_refsource_FEDORA
https://exchange.xforce.ibmcloud.com/vulnerabilities/64831vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/515781/100/0/threadedmailing-listx_refsource_BUGTRAQ
https://nvd.nist.gov/vuln/detail/CVE-2011-0495

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2011-0495

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2011-0495

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2011-0495

III. Intelligence Information for CVE-2011-0495

IV. Related Vulnerabilities

V. Comments for CVE-2011-0495

Leave a comment