Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Digium Asterisk管理界面manager.c任意命令执行漏洞
Vulnerability Description
Digium Asterisk是美国Digium公司的一套开源的电话交换机（PBX）系统软件。该软件支持语音信箱、多方语音会议、交互式语音应答(IVR)等。 Asterisk管理界面中的manager.c不能正确检查系统权限。远程认证用户可以借助带有Application头和Async头的Originate操作，执行任意命令。 该漏洞存在于以下版本中：Asterisk Open Source 1.4.40.1之前的1.4.x版本,1.6.1.25之前的1.6.1.x版本,1.6.2.17.3之前的1.6.
CVSS Information
N/A
Vulnerability Type
N/A