CVE-2012-2186

EPSS 3.56%
Veröffentlicht 31.08.2012 14:55:00
Zuletzt bearbeitet 16.06.2026 23:41:08
Erkennungen
Login

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 allows remote authenticated users to execute arbitrary commands by leveraging originate privileges and providing an ExternalIVR value in an AMI Originate action.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 117 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Asterisk ≫ Open Source Version 1.8.0

Asterisk ≫ Open Source Version 1.8.0 Update beta1

Asterisk ≫ Open Source Version 1.8.0 Update beta2

Asterisk ≫ Open Source Version 1.8.0 Update beta3

Asterisk ≫ Open Source Version 1.8.0 Update beta4

Asterisk ≫ Open Source Version 1.8.0 Update beta5

Asterisk ≫ Open Source Version 1.8.0 Update rc1

Asterisk ≫ Open Source Version 1.8.0 Update rc2

Asterisk ≫ Open Source Version 1.8.0 Update rc3

Asterisk ≫ Open Source Version 1.8.0 Update rc4

Asterisk ≫ Open Source Version 1.8.0 Update rc5

Asterisk ≫ Open Source Version 1.8.1

Asterisk ≫ Open Source Version 1.8.1 Update rc1

Asterisk ≫ Open Source Version 1.8.1.1

Asterisk ≫ Open Source Version 1.8.1.2

Asterisk ≫ Open Source Version 1.8.2

Asterisk ≫ Open Source Version 1.8.2 Update rc1

Asterisk ≫ Open Source Version 1.8.2.1

Asterisk ≫ Open Source Version 1.8.2.2

Asterisk ≫ Open Source Version 1.8.2.3

Asterisk ≫ Open Source Version 1.8.2.4

Asterisk ≫ Open Source Version 1.8.3

Asterisk ≫ Open Source Version 1.8.3 Update rc1

Asterisk ≫ Open Source Version 1.8.3 Update rc2

Asterisk ≫ Open Source Version 1.8.3 Update rc3

Asterisk ≫ Open Source Version 1.8.3.1

Asterisk ≫ Open Source Version 1.8.3.2

Asterisk ≫ Open Source Version 1.8.3.3

Asterisk ≫ Open Source Version 1.8.4

Asterisk ≫ Open Source Version 1.8.4 Update rc1

Asterisk ≫ Open Source Version 1.8.4 Update rc2

Asterisk ≫ Open Source Version 1.8.4 Update rc3

Asterisk ≫ Open Source Version 1.8.4.1

Asterisk ≫ Open Source Version 1.8.4.2

Asterisk ≫ Open Source Version 1.8.4.3

Asterisk ≫ Open Source Version 1.8.4.4

Asterisk ≫ Open Source Version 1.8.5 Update rc1

Asterisk ≫ Open Source Version 1.8.5.0

Asterisk ≫ Open Source Version 1.8.6.0

Asterisk ≫ Open Source Version 1.8.6.0 Update rc1

Asterisk ≫ Open Source Version 1.8.6.0 Update rc2

Asterisk ≫ Open Source Version 1.8.6.0 Update rc3

Asterisk ≫ Open Source Version 1.8.7

Asterisk ≫ Open Source Version 1.8.7.0

Asterisk ≫ Open Source Version 1.8.7.0 Update rc1

Asterisk ≫ Open Source Version 1.8.7.0 Update rc2

Asterisk ≫ Open Source Version 1.8.7.1

Asterisk ≫ Open Source Version 1.8.7.2

Asterisk ≫ Open Source Version 1.8.8.0

Asterisk ≫ Open Source Version 1.8.8.0 Update rc1

Asterisk ≫ Open Source Version 1.8.8.0 Update rc2

Asterisk ≫ Open Source Version 1.8.8.0 Update rc3

Asterisk ≫ Open Source Version 1.8.8.0 Update rc4

Asterisk ≫ Open Source Version 1.8.8.0 Update rc5

Asterisk ≫ Open Source Version 1.8.8.1

Asterisk ≫ Open Source Version 1.8.8.2

Asterisk ≫ Open Source Version 1.8.9.0

Asterisk ≫ Open Source Version 1.8.9.0 Update rc1

Asterisk ≫ Open Source Version 1.8.9.0 Update rc2

Asterisk ≫ Open Source Version 1.8.9.0 Update rc3

Asterisk ≫ Open Source Version 1.8.9.1

Asterisk ≫ Open Source Version 1.8.9.2

Asterisk ≫ Open Source Version 1.8.9.3

Asterisk ≫ Open Source Version 1.8.10.0

Asterisk ≫ Open Source Version 1.8.10.0 Update rc1

Asterisk ≫ Open Source Version 1.8.10.0 Update rc2

Asterisk ≫ Open Source Version 1.8.10.0 Update rc3

Asterisk ≫ Open Source Version 1.8.10.0 Update rc4

Asterisk ≫ Open Source Version 1.8.10.1

Asterisk ≫ Open Source Version 1.8.11.0

Asterisk ≫ Open Source Version 1.8.11.0 Update rc2

Asterisk ≫ Open Source Version 1.8.11.0 Update rc3

Asterisk ≫ Open Source Version 1.8.11.1

Asterisk ≫ Open Source Version 1.8.12

Asterisk ≫ Open Source Version 1.8.12.0

Asterisk ≫ Open Source Version 1.8.12.0 Update rc1

Asterisk ≫ Open Source Version 1.8.12.0 Update rc2

Asterisk ≫ Open Source Version 1.8.12.0 Update rc3

Sangoma ≫ Asterisk Version <= 1.8.15.0

Asterisk ≫ Open Source Version 10.0.0

Asterisk ≫ Open Source Version 10.0.0 Update beta1

Asterisk ≫ Open Source Version 10.0.0 Update beta2

Asterisk ≫ Open Source Version 10.0.0 Update rc1

Asterisk ≫ Open Source Version 10.0.0 Update rc2

Asterisk ≫ Open Source Version 10.0.0 Update rc3

Asterisk ≫ Open Source Version 10.0.1

Asterisk ≫ Open Source Version 10.1.0

Asterisk ≫ Open Source Version 10.1.0 Update rc1

Asterisk ≫ Open Source Version 10.1.0 Update rc2

Asterisk ≫ Open Source Version 10.1.1

Asterisk ≫ Open Source Version 10.1.2

Asterisk ≫ Open Source Version 10.1.3

Asterisk ≫ Open Source Version 10.2.0

Asterisk ≫ Open Source Version 10.2.0 Update rc1

Asterisk ≫ Open Source Version 10.2.0 Update rc2

Asterisk ≫ Open Source Version 10.2.0 Update rc3

Asterisk ≫ Open Source Version 10.2.0 Update rc4

Asterisk ≫ Open Source Version 10.2.1

Asterisk ≫ Open Source Version 10.3

Asterisk ≫ Open Source Version 10.3.0

Asterisk ≫ Open Source Version 10.3.0 Update rc2

Asterisk ≫ Open Source Version 10.3.0 Update rc3

Asterisk ≫ Open Source Version 10.3.1

Asterisk ≫ Open Source Version 10.4.0

Asterisk ≫ Open Source Version 10.4.0 Update rc1

Asterisk ≫ Open Source Version 10.4.0 Update rc2

Asterisk ≫ Open Source Version 10.4.0 Update rc3

Sangoma ≫ Asterisk Version <= 10.7.0

Asterisk ≫ Certified Asterisk Update cert5 Version <= 1.8.11

Asterisk ≫ Certified Asterisk Version 1.8.11 Update cert

Asterisk ≫ Certified Asterisk Version 1.8.11 Update cert1

Asterisk ≫ Certified Asterisk Version 1.8.11 Update cert2

Asterisk ≫ Certified Asterisk Version 1.8.11 Update cert3

Asterisk ≫ Certified Asterisk Version 1.8.11 Update cert4

Asterisk ≫ Digiumphones Version <= 10.7.0

Asterisk ≫ Business Edition Version <= c.3.7.5

Asterisk ≫ Business Edition Version c.3.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.56%	0.878

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/50687

http://secunia.com/advisories/50756

http://www.debian.org/security/2012/dsa-2550

http://downloads.asterisk.org/pub/security/AST-2012-012.html

Patch

Vendor Advisory

http://www.securitytracker.com/id?1027460

https://nvd.nist.gov/vuln/detail/CVE-2012-2186

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2186

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2186

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-2186