Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2010-0685

The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern matches, allows context-dependent attackers to inject strings into the dialplan using metacharacters that are injected when the variable is expanded, as demonstrated using the Dial application to process a crafted SIP INVITE message that adds an unintended outgoing channel leg. NOTE: it could be argued that this is not a vulnerability in Asterisk, but a class of vulnerabilities that can occur in any program that uses this feature without the associated filtering functionality that is already available.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.3%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2010-0685
  • Digium » Asterisk » Version: 1.2.0
    cpe:2.3:a:digium:asterisk:1.2.0
  • Digium » Asterisk » Version: 1.2.1
    cpe:2.3:a:digium:asterisk:1.2.1
  • Digium » Asterisk » Version: 1.2.10
    cpe:2.3:a:digium:asterisk:1.2.10
  • Digium » Asterisk » Version: 1.2.11
    cpe:2.3:a:digium:asterisk:1.2.11
  • Digium » Asterisk » Version: 1.2.12
    cpe:2.3:a:digium:asterisk:1.2.12
  • Digium » Asterisk » Version: 1.2.12.1
    cpe:2.3:a:digium:asterisk:1.2.12.1
  • Digium » Asterisk » Version: 1.2.13
    cpe:2.3:a:digium:asterisk:1.2.13
  • Digium » Asterisk » Version: 1.2.14
    cpe:2.3:a:digium:asterisk:1.2.14
  • Digium » Asterisk » Version: 1.2.15
    cpe:2.3:a:digium:asterisk:1.2.15
  • Digium » Asterisk » Version: 1.2.16
    cpe:2.3:a:digium:asterisk:1.2.16
  • Digium » Asterisk » Version: 1.2.17
    cpe:2.3:a:digium:asterisk:1.2.17
  • Digium » Asterisk » Version: 1.2.18
    cpe:2.3:a:digium:asterisk:1.2.18
  • Digium » Asterisk » Version: 1.2.19
    cpe:2.3:a:digium:asterisk:1.2.19
  • Digium » Asterisk » Version: 1.2.2
    cpe:2.3:a:digium:asterisk:1.2.2
  • Digium » Asterisk » Version: 1.2.20
    cpe:2.3:a:digium:asterisk:1.2.20
  • Digium » Asterisk » Version: 1.2.21
    cpe:2.3:a:digium:asterisk:1.2.21
  • Digium » Asterisk » Version: 1.2.21.1
    cpe:2.3:a:digium:asterisk:1.2.21.1
  • Digium » Asterisk » Version: 1.2.22
    cpe:2.3:a:digium:asterisk:1.2.22
  • Digium » Asterisk » Version: 1.2.23
    cpe:2.3:a:digium:asterisk:1.2.23
  • Digium » Asterisk » Version: 1.2.24
    cpe:2.3:a:digium:asterisk:1.2.24
  • Digium » Asterisk » Version: 1.2.25
    cpe:2.3:a:digium:asterisk:1.2.25
  • Digium » Asterisk » Version: 1.2.26
    cpe:2.3:a:digium:asterisk:1.2.26
  • Digium » Asterisk » Version: 1.2.26.1
    cpe:2.3:a:digium:asterisk:1.2.26.1
  • Digium » Asterisk » Version: 1.2.26.2
    cpe:2.3:a:digium:asterisk:1.2.26.2
  • Digium » Asterisk » Version: 1.2.27
    cpe:2.3:a:digium:asterisk:1.2.27
  • Digium » Asterisk » Version: 1.2.28
    cpe:2.3:a:digium:asterisk:1.2.28
  • Digium » Asterisk » Version: 1.2.28.1
    cpe:2.3:a:digium:asterisk:1.2.28.1
  • Digium » Asterisk » Version: 1.2.29
    cpe:2.3:a:digium:asterisk:1.2.29
  • Digium » Asterisk » Version: 1.2.3
    cpe:2.3:a:digium:asterisk:1.2.3
  • Digium » Asterisk » Version: 1.2.30
    cpe:2.3:a:digium:asterisk:1.2.30
  • Digium » Asterisk » Version: 1.2.30.1
    cpe:2.3:a:digium:asterisk:1.2.30.1
  • Digium » Asterisk » Version: 1.2.30.2
    cpe:2.3:a:digium:asterisk:1.2.30.2
  • Digium » Asterisk » Version: 1.2.30.3
    cpe:2.3:a:digium:asterisk:1.2.30.3
  • Digium » Asterisk » Version: 1.2.30.4
    cpe:2.3:a:digium:asterisk:1.2.30.4
  • Digium » Asterisk » Version: 1.2.31
    cpe:2.3:a:digium:asterisk:1.2.31
  • Digium » Asterisk » Version: 1.2.31.1
    cpe:2.3:a:digium:asterisk:1.2.31.1
  • Digium » Asterisk » Version: 1.2.32
    cpe:2.3:a:digium:asterisk:1.2.32
  • Digium » Asterisk » Version: 1.2.33
    cpe:2.3:a:digium:asterisk:1.2.33
  • Digium » Asterisk » Version: 1.2.34
    cpe:2.3:a:digium:asterisk:1.2.34
  • Digium » Asterisk » Version: 1.2.35
    cpe:2.3:a:digium:asterisk:1.2.35
  • Digium » Asterisk » Version: 1.2.36
    cpe:2.3:a:digium:asterisk:1.2.36
  • Digium » Asterisk » Version: 1.2.6
    cpe:2.3:a:digium:asterisk:1.2.6
  • Digium » Asterisk » Version: 1.2.7
    cpe:2.3:a:digium:asterisk:1.2.7
  • Digium » Asterisk » Version: 1.2.8
    cpe:2.3:a:digium:asterisk:1.2.8
  • Digium » Asterisk » Version: 1.2.9
    cpe:2.3:a:digium:asterisk:1.2.9
  • Digium » Asterisk » Version: 1.4.0
    cpe:2.3:a:digium:asterisk:1.4.0
  • Digium » Asterisk » Version: 1.4.1
    cpe:2.3:a:digium:asterisk:1.4.1
  • Digium » Asterisk » Version: 1.4.10
    cpe:2.3:a:digium:asterisk:1.4.10
  • Digium » Asterisk » Version: 1.4.11
    cpe:2.3:a:digium:asterisk:1.4.11
  • Digium » Asterisk » Version: 1.4.12
    cpe:2.3:a:digium:asterisk:1.4.12
  • Digium » Asterisk » Version: 1.4.13
    cpe:2.3:a:digium:asterisk:1.4.13
  • Digium » Asterisk » Version: 1.4.14
    cpe:2.3:a:digium:asterisk:1.4.14
  • Digium » Asterisk » Version: 1.4.15
    cpe:2.3:a:digium:asterisk:1.4.15
  • Digium » Asterisk » Version: 1.4.16
    cpe:2.3:a:digium:asterisk:1.4.16
  • Digium » Asterisk » Version: 1.4.17
    cpe:2.3:a:digium:asterisk:1.4.17
  • Digium » Asterisk » Version: 1.4.18
    cpe:2.3:a:digium:asterisk:1.4.18
  • Digium » Asterisk » Version: 1.4.19
    cpe:2.3:a:digium:asterisk:1.4.19
  • Digium » Asterisk » Version: 1.4.2
    cpe:2.3:a:digium:asterisk:1.4.2
  • Digium » Asterisk » Version: 1.4.20
    cpe:2.3:a:digium:asterisk:1.4.20
  • Digium » Asterisk » Version: 1.4.21
    cpe:2.3:a:digium:asterisk:1.4.21
  • Digium » Asterisk » Version: 1.4.22
    cpe:2.3:a:digium:asterisk:1.4.22
  • Digium » Asterisk » Version: 1.4.23
    cpe:2.3:a:digium:asterisk:1.4.23
  • Digium » Asterisk » Version: 1.4.24
    cpe:2.3:a:digium:asterisk:1.4.24
  • Digium » Asterisk » Version: 1.4.25
    cpe:2.3:a:digium:asterisk:1.4.25
  • Digium » Asterisk » Version: 1.4.26
    cpe:2.3:a:digium:asterisk:1.4.26
  • Digium » Asterisk » Version: 1.4.27
    cpe:2.3:a:digium:asterisk:1.4.27
  • Digium » Asterisk » Version: 1.4.3
    cpe:2.3:a:digium:asterisk:1.4.3
  • Digium » Asterisk » Version: 1.4.4
    cpe:2.3:a:digium:asterisk:1.4.4
  • Digium » Asterisk » Version: 1.4.5
    cpe:2.3:a:digium:asterisk:1.4.5
  • Digium » Asterisk » Version: 1.4.6
    cpe:2.3:a:digium:asterisk:1.4.6
  • Digium » Asterisk » Version: 1.4.7
    cpe:2.3:a:digium:asterisk:1.4.7
  • Digium » Asterisk » Version: 1.4.8
    cpe:2.3:a:digium:asterisk:1.4.8
  • Digium » Asterisk » Version: 1.4.9
    cpe:2.3:a:digium:asterisk:1.4.9
  • Digium » Asterisk » Version: 1.6.0
    cpe:2.3:a:digium:asterisk:1.6.0
  • Digium » Asterisk » Version: 1.6.1
    cpe:2.3:a:digium:asterisk:1.6.1
  • Digium » Asterisk » Version: 1.6.1.0
    cpe:2.3:a:digium:asterisk:1.6.1.0
  • Digium » Asterisk » Version: 1.6.2.0
    cpe:2.3:a:digium:asterisk:1.6.2.0
  • Digium » Asterisk » Version: b.1.3.2
    cpe:2.3:a:digium:asterisk:b.1.3.2
  • Digium » Asterisk » Version: b.1.3.3
    cpe:2.3:a:digium:asterisk:b.1.3.3
  • Digium » Asterisk » Version: b.2.2.0
    cpe:2.3:a:digium:asterisk:b.2.2.0
  • Digium » Asterisk » Version: b.2.2.1
    cpe:2.3:a:digium:asterisk:b.2.2.1
  • Digium » Asterisk » Version: b.2.3.1
    cpe:2.3:a:digium:asterisk:b.2.3.1
  • Digium » Asterisk » Version: b.2.3.2
    cpe:2.3:a:digium:asterisk:b.2.3.2
  • Digium » Asterisk » Version: b.2.3.3
    cpe:2.3:a:digium:asterisk:b.2.3.3
  • Digium » Asterisk » Version: b.2.3.4
    cpe:2.3:a:digium:asterisk:b.2.3.4
  • Digium » Asterisk » Version: b.2.3.5
    cpe:2.3:a:digium:asterisk:b.2.3.5
  • Digium » Asterisk » Version: b.2.3.6
    cpe:2.3:a:digium:asterisk:b.2.3.6
  • Digium » Asterisk » Version: b.2.5.0
    cpe:2.3:a:digium:asterisk:b.2.5.0
  • Digium » Asterisk » Version: b.2.5.1
    cpe:2.3:a:digium:asterisk:b.2.5.1
  • Digium » Asterisk » Version: b.2.5.2
    cpe:2.3:a:digium:asterisk:b.2.5.2
  • Digium » Asterisk » Version: b.2.5.3
    cpe:2.3:a:digium:asterisk:b.2.5.3
  • Digium » Asterisk » Version: c.1.0
    cpe:2.3:a:digium:asterisk:c.1.0
  • Digium » Asterisk » Version: c.1.6
    cpe:2.3:a:digium:asterisk:c.1.6
  • Digium » Asterisk » Version: c.1.6.1
    cpe:2.3:a:digium:asterisk:c.1.6.1
  • Digium » Asterisk » Version: c.1.6.2
    cpe:2.3:a:digium:asterisk:c.1.6.2
  • Digium » Asterisk » Version: c.1.8.0
    cpe:2.3:a:digium:asterisk:c.1.8.0
  • Digium » Asterisk » Version: c.1.8.1
    cpe:2.3:a:digium:asterisk:c.1.8.1
  • Digium » Asterisk » Version: c.2.3
    cpe:2.3:a:digium:asterisk:c.2.3
  • Digium » Asterisk » Version: c.3.0
    cpe:2.3:a:digium:asterisk:c.3.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved