CVE

Id
64415  
CVE No.
CVE-2013-4468  
Status
Candidate  
Description
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension parameter in an OriginateVDRelogin action to manager_send.php.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635002 64415 CVE-2013-4468 EXPLOIT-DB:29513  View
635003 64415 CVE-2013-4468 URL:http://www.exploit-db.com/exploits/29513  View
635004 64415 CVE-2013-4468 MLIST:[oss-security] 20131023 VICIDIAL 2.7 - SQL Injection, Command Injection  View
635005 64415 CVE-2013-4468 URL:http://www.openwall.com/lists/oss-security/2013/10/23/10  View
635006 64415 CVE-2013-4468 MLIST:[oss-security] 20131024 Re: VICIDIAL 2.7 - SQL Injection, Command Injection  View
635007 64415 CVE-2013-4468 URL:http://www.openwall.com/lists/oss-security/2013/10/25/1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23677 JVNDB-2013-005252 poppler の utils/pdfseparate.cc の extractPages 関数におけるスタックベースのバッファオーバーフローの脆弱性 poppler の utils/pdfseparate.cc の extractPages 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-4473 64415 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005252.html  View