CVE-2007-1595

Published: Mar 22, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form.

Affected (1)

Products: Asterisk: Asterisk

Asterisk

1 product

Asterisk

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Asterisk Asterisk	Version 1.2.13

References (14)

http://bugs.digium.com/view.php?id=9316

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/24694

Source: cve@mitre.org

http://secunia.com/advisories/25582

Source: cve@mitre.org

http://svn.digium.com/view/asterisk?rev=59073&view=rev

Source: cve@mitre.org

Patch

http://www.novell.com/linux/security/advisories/2007_34_asterisk.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/23155

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1123

Source: cve@mitre.org

http://bugs.digium.com/view.php?id=9316