Priority MEDIUM 48
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s8…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05506 · Published 2007-07-18 · No fix listed
Priority MEDIUM 47
The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03837 · Published 2008-03-24 · No fix listed CWE-255
Priority MEDIUM 47
The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows rem…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.3152 · Published 2007-07-18 · No fix listed
Priority MEDIUM 46
Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.11523 · Published 2008-03-24 · No fix listed CWE-119
Priority MEDIUM 45
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.2656 · Published 2007-07-18 · No fix listed
Priority MEDIUM 44
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x bef…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.25423 · Published 2008-01-08 · No fix listed CWE-399
Priority MEDIUM 43
Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Applian…
CVSS 2.0HIGH 8.8· Network · No auth · Interaction — · EPSS 0.02327 · Published 2008-03-20 · No fix listed CWE-264
Priority MEDIUM 40
The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0338 · Published 2008-07-24 · No fix listed CWE-287
Priority LOW 34
The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW mes…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.014 · Published 2008-04-23 · No fix listed CWE-16
Priority LOW 26
The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote at…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01775 · Published 2007-08-22 · No fix listed
Priority LOW 26
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted ST…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0169 · Published 2007-07-18 · No fix listed
Priority LOW 25
The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Applian…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02743 · Published 2008-04-23 · No fix listed CWE-287
Priority LOW 19
The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01149 · Published 2007-08-09 · No fix listed