CVE-2010-1224

Published: Apr 1, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce remote host access controls when CIDR notation "/0" is used in permit= and deny= configuration rules, which causes an improper arithmetic shift and might allow remote attackers to bypass ACL rules and access services from unauthorized hosts.

Affected (63)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

63 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.6.0.10
Digium Asterisk	Version 1.6.0.12
Digium Asterisk	Version 1.6.0.13
Digium Asterisk	Version 1.6.0.14
Digium Asterisk	Version 1.6.0.15
Digium Asterisk	Version 1.6.0.16 rc1
Digium Asterisk	Version 1.6.0.16 rc2
Digium Asterisk	Version 1.6.0.17
Digium Asterisk	Version 1.6.0.18
Digium Asterisk	Version 1.6.0.18 rc1
Digium Asterisk	Version 1.6.0.18 rc2
Digium Asterisk	Version 1.6.0.18 rc3
Digium Asterisk	Version 1.6.0.19
Digium Asterisk	Version 1.6.0.1
Digium Asterisk	Version 1.6.0.20 rc1
Digium Asterisk	Version 1.6.0.21
Digium Asterisk	Version 1.6.0.21 rc1
Digium Asterisk	Version 1.6.0.22
Digium Asterisk	Version 1.6.0.23 rc2
Digium Asterisk	Version 1.6.0.24
Digium Asterisk	Version 1.6.0.2
Digium Asterisk	Version 1.6.0.3
Digium Asterisk	Version 1.6.0.5
Digium Asterisk	Version 1.6.0.6
Digium Asterisk	Version 1.6.0.7
Digium Asterisk	Version 1.6.0.8
Digium Asterisk	Version 1.6.0.9
Digium Asterisk	Version 1.6.0
Digium Asterisk	Version 1.6.1.10
Digium Asterisk	Version 1.6.1.10 rc1
Digium Asterisk	Version 1.6.1.10 rc2
Digium Asterisk	Version 1.6.1.10 rc3
Digium Asterisk	Version 1.6.1.11
Digium Asterisk	Version 1.6.1.12
Digium Asterisk	Version 1.6.1.12 rc1
Digium Asterisk	Version 1.6.1.13
Digium Asterisk	Version 1.6.1.13 rc1
Digium Asterisk	Version 1.6.1.14
Digium Asterisk	Version 1.6.1.15 rc2
Digium Asterisk	Version 1.6.1.16
Digium Asterisk	Version 1.6.1.1
Digium Asterisk	Version 1.6.1.2
Digium Asterisk	Version 1.6.1.4
Digium Asterisk	Version 1.6.1.5
Digium Asterisk	Version 1.6.1.6
Digium Asterisk	Version 1.6.1.7 rc1
Digium Asterisk	Version 1.6.1.7 rc2
Digium Asterisk	Version 1.6.1.8
Digium Asterisk	Version 1.6.1.9
Digium Asterisk	Version 1.6.1
Digium Asterisk	Version 1.6.2.0
Digium Asterisk	Version 1.6.2.0 rc2
Digium Asterisk	Version 1.6.2.0 rc3
Digium Asterisk	Version 1.6.2.0 rc4
Digium Asterisk	Version 1.6.2.0 rc5
Digium Asterisk	Version 1.6.2.0 rc6
Digium Asterisk	Version 1.6.2.0 rc7
Digium Asterisk	Version 1.6.2.0 rc8
Digium Asterisk	Version 1.6.2.1
Digium Asterisk	Version 1.6.2.1 rc1
Digium Asterisk	Version 1.6.2.2
Digium Asterisk	Version 1.6.2.3 rc2
Digium Asterisk	Version 1.6.2.4