Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2008-1333

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by (1) the ast_verbose logging API call, or (2) the astman_append function.

  • Published: Mar 20, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-1333
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:N/I:P/A:P

CWEs:

Software From Fixed in
asterisk / open_source 1.6.0_beta4 1.6.0_beta4.x
asterisk / open_source 1.6.0_beta3 1.6.0_beta3.x
asterisk / open_source 1.6.0_beta5 1.6.0_beta5.x
asterisk / open_source 1.6.0_beta2 1.6.0_beta2.x
asterisk / open_source 1.6.0_beta1 1.6.0_beta1.x