NVD

Id
1292  
Name
CVE-2008-1333  
Description
Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by (1) the ast_verbose logging API call, or (2) the astman_append function.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-03-19  
Modified Date
2011-03-07  
Seq
2008-1333  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8142 1292 CVE-2008-1333 http://downloads.digium.com/pub/security/AST-2008-004.html  View
8143 1292 CVE-2008-1333 1019630  View
8144 1292 CVE-2008-1333 http://www.asterisk.org/node/48466  View
8145 1292 CVE-2008-1333 DSA-1525  View
8146 1292 CVE-2008-1333 20080318 AST-2008-004: Format String Vulnerability in Logger and Manager  View
8147 1292 CVE-2008-1333 28311  View
8148 1292 CVE-2008-1333 ADV-2008-0928  View
8149 1292 CVE-2008-1333 asterisk-astverbose-dos(41301)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47540 JVNDB-2008-002850 Asterisk Open Source におけるフォーマットストリングの脆弱性 Asterisk Open Source には、フォーマットストリングの脆弱性が存在します。 CVE-2008-1333 31446 CVE-2008-1333 1292 5.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002850.html 2008-03-18 2012-06-26 View