NVD

Id
54461  
Name
CVE-2007-2294  
Description
The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-04-26  
Modified Date
2011-03-07  
Seq
2007-2294  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276261 54461 CVE-2007-2294 2646  View
276262 54461 CVE-2007-2294 http://www.asterisk.org/files/ASA-2007-012.pdf  View
276263 54461 CVE-2007-2294 DSA-1358  View
276264 54461 CVE-2007-2294 SUSE-SA:2007:034  View
276265 54461 CVE-2007-2294 20070425 ASA-2007-012: Remote Crash Vulnerability in Manager Interface  View
276266 54461 CVE-2007-2294 23649  View
276267 54461 CVE-2007-2294 1017955  View
276268 54461 CVE-2007-2294 ADV-2007-1534  View
276269 54461 CVE-2007-2294 asterisk-interface-dos(33886)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53212 JVNDB-2007-001904 Asterisk の Manager Interface におけるサービス運用妨害 (DoS) の脆弱性 Asterisk の Manager Interface には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-2294 25649 CVE-2007-2294 54461 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001904.html 2007-04-26 2012-06-26 View