NVD

Id
60726  
Name
CVE-2006-2021  
Description
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface (ARI) web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used to determine existence of files.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-04-25  
Modified Date
2011-03-07  
Seq
2006-2021  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313528 60726 CVE-2006-2021 750  View
313529 60726 CVE-2006-2021 20060421 [SecuriWeb 2006.1] directory traversal in Asterisk@Home and ARI  View
313530 60726 CVE-2006-2021 17641  View
313531 60726 CVE-2006-2021 http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2006.1  View
313532 60726 CVE-2006-2021 ADV-2006-1457  View
313533 60726 CVE-2006-2021 asterisk-audio-directory-traversal(25996)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61503 JVNDB-2006-003769 Asterisk Recording Interface の recordings/misc/audio.php における絶対パストラバーサルの脆弱性 Asterisk Recording Interface (ARI) の recordings/misc/audio.php の Web インターフェースには、絶対パストラバーサルの脆弱性が存在します。 CVE-2006-2021 18123 CVE-2006-2021 60726 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003769.html 2006-04-25 2013-12-26 View