NVD

Id
35472  
Name
CVE-2014-8418  
Description
The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before 1.8.28-cert8 and 11.6 before 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protocol, as demonstrated by the AMI protocol.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-11-24  
Modified Date
2014-11-25  
Seq
2014-8418  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181761 35472 CVE-2014-8418 http://downloads.asterisk.org/pub/security/AST-2014-018.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16755 JVNDB-2014-005630 Asterisk Open Source および Certified Asterisk の DB ダイヤルプラン機能における権限を取得される脆弱性 Asterisk Open Source および Certified Asterisk の DB ダイアルプラン機能には、権限を取得される脆弱性が存在します。 CVE-2014-8418 75711 CVE-2014-8418 35472 9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005630.html 2014-11-20 2014-11-26 View