NVD

Id
46061  
Name
CVE-2012-4737  
Description
channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certain uses of peer credentials, which allows remote authenticated users to bypass intended outbound-call restrictions by leveraging the availability of these credentials.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-31  
Modified Date
2013-04-18  
Seq
2012-4737  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231170 46061 CVE-2012-4737 http://downloads.asterisk.org/pub/security/AST-2012-013.html  View
231171 46061 CVE-2012-4737 DSA-2550  View
231172 46061 CVE-2012-4737 55335  View
231173 46061 CVE-2012-4737 1027461  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28325 JVNDB-2012-004032 複数の Asterisk 製品の channels/chan_iax2.c における制限を回避される脆弱性 複数の Asterisk 製品の channels/chan_iax2.c は、特定のピア証明書を使用する場合、ACL ルールを強制しないため、アウトバウンドコールの制限を回避される脆弱性が存在します。 CVE-2012-4737 57975 CVE-2012-4737 46061 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004032.html 2012-08-27 2012-11-08 View