CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2294

The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.034

EPSS Ranking 86.9%

CVSS Severity

CVSS v2 Score 7.8

References

Products affected by CVE-2007-2294

Asterisk » Asterisk » Version: 1.2.0_beta1

cpe:2.3:a:asterisk:asterisk:1.2.0_beta1
Asterisk » Asterisk » Version: 1.2.0_beta2

cpe:2.3:a:asterisk:asterisk:1.2.0_beta2
Asterisk » Asterisk » Version: 1.2.10

cpe:2.3:a:asterisk:asterisk:1.2.10
Asterisk » Asterisk » Version: 1.2.11

cpe:2.3:a:asterisk:asterisk:1.2.11
Asterisk » Asterisk » Version: 1.2.12

cpe:2.3:a:asterisk:asterisk:1.2.12
Asterisk » Asterisk » Version: 1.2.13

cpe:2.3:a:asterisk:asterisk:1.2.13
Asterisk » Asterisk » Version: 1.2.14

cpe:2.3:a:asterisk:asterisk:1.2.14
Asterisk » Asterisk » Version: 1.2.15

cpe:2.3:a:asterisk:asterisk:1.2.15
Asterisk » Asterisk » Version: 1.2.16

cpe:2.3:a:asterisk:asterisk:1.2.16
Asterisk » Asterisk » Version: 1.2.17

cpe:2.3:a:asterisk:asterisk:1.2.17
Asterisk » Asterisk » Version: 1.2.5

cpe:2.3:a:asterisk:asterisk:1.2.5
Asterisk » Asterisk » Version: 1.2.6

cpe:2.3:a:asterisk:asterisk:1.2.6
Asterisk » Asterisk » Version: 1.2.7

cpe:2.3:a:asterisk:asterisk:1.2.7
Asterisk » Asterisk » Version: 1.2.8

cpe:2.3:a:asterisk:asterisk:1.2.8
Asterisk » Asterisk » Version: 1.2.9

cpe:2.3:a:asterisk:asterisk:1.2.9
Asterisk » Asterisk » Version: 1.4.1

cpe:2.3:a:asterisk:asterisk:1.4.1
Asterisk » Asterisk » Version: 1.4.2

cpe:2.3:a:asterisk:asterisk:1.4.2
Asterisk » Asterisk » Version: 1.4_beta

cpe:2.3:a:asterisk:asterisk:1.4_beta

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2294

Products

Pricing

Contact Us