CVE-2014-8418

Severity

90%

Complexity

80%

Confidentiality

165%

The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before 1.8.28-cert8 and 11.6 before 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protocol, as demonstrated by the AMI protocol.

The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before 1.8.28-cert8 and 11.6 before 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protocol, as demonstrated by the AMI protocol.

CVSS 2.0 Base Score 9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:C/I:C/A:C).

Overview

Type

Digium Certified Asterisk

First reported 10 years ago

2014-11-24 15:59:00

Last updated 5 years ago

2019-07-16 12:23:00

Affected Software

Digium Certified Asterisk 1.8.28

1.8.28

Digium Certified Asterisk 1.8.28 cert 1 LTS

1.8.28

Digium Certified Asterisk 1.8.28 Cert1-Release Candidate 1

1.8.28

Digium Certified Asterisk 1.8.28 Cert2

1.8.28

Digium Certified Asterisk 1.8.28-cert2 LTS

1.8.28

Digium Certified Asterisk 1.8.28 Cert3

1.8.28

Digium Certified Asterisk 1.8.28 Cert4

1.8.28

Digium Certified Asterisk 1.8.28 Cert5

1.8.28

Digium Certified Asterisk 11.6-cert1

11.6

Digium Certified Asterisk 11.6-cert2

11.6

Digium Certified Asterisk 11.6-cert3

11.6

Digium Certified Asterisk 11.6 Cert4

11.6

Digium Certified Asterisk 11.6 Cert5

11.6

Digium Certified Asterisk 11.6 Cert6

11.6

Digium Certified Asterisk 11.6 Cert7

11.6

Digium Certified Asterisk 11.6.0

11.6.0

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.