CVE-2005-3559

Published: Nov 16, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter.

Affected (33)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 0.1.0
Digium Asterisk	Version 0.1.10
Digium Asterisk	Version 0.1.11
Digium Asterisk	Version 0.1.12
Digium Asterisk	Version 0.1.1
Digium Asterisk	Version 0.1.2
Digium Asterisk	Version 0.1.3
Digium Asterisk	Version 0.1.4
Digium Asterisk	Version 0.1.5
Digium Asterisk	Version 0.1.6
Digium Asterisk	Version 0.1.7
Digium Asterisk	Version 0.1.8
Digium Asterisk	Version 0.1.9
Digium Asterisk	Version 0.2.0
Digium Asterisk	Version 0.3.0
Digium Asterisk	Version 0.4.0
Digium Asterisk	Version 0.5.0
Digium Asterisk	Version 0.7.0
Digium Asterisk	Version 0.7.1
Digium Asterisk	Version 0.7.2
Digium Asterisk	Version 1.0.0
Digium Asterisk	Version 1.0.1
Digium Asterisk	Version 1.0.2
Digium Asterisk	Version 1.0.3
Digium Asterisk	Version 1.0.4
Digium Asterisk	Version 1.0.5
Digium Asterisk	Version 1.0.6
Digium Asterisk	Version 1.0.7
Digium Asterisk	Version 1.0.8
Digium Asterisk	Version 1.0.9
Digium Asterisk	Version 1.0_rc1
Digium Asterisk	Version 1.0_rc2
Digium Asterisk	Version 1.2.0_beta1