CVE-2005-3559: Medium severity Asterisk vulnerability
Published Nov 16, 2005
·Updated
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter.
Affected Software
33 affected components
Asterisk=1.2.0_beta1
Asterisk=0.7.1
Asterisk=0.1.9
Asterisk=0.2.0
Asterisk=0.1.3
Asterisk=0.3.0
Asterisk=0.7.2
Asterisk=0.5.0
Asterisk=1.0.9
Asterisk=1.0.2
Asterisk=0.1.11
Asterisk=1.0_rc2
Asterisk=0.1.6
Asterisk=1.0.1
Asterisk=1.0.3
Asterisk=1.0.5
Asterisk=0.1.8
Asterisk=0.1.12
Asterisk=1.0.6
Asterisk=0.1.0
Asterisk=0.1.7
Asterisk=1.0.4
Asterisk=1.0.8
Asterisk=0.1.1
Asterisk=0.1.2
Asterisk=0.1.4
Asterisk=1.0.0
Asterisk=1.0.7
Asterisk=0.7.0
Asterisk=0.1.5
Asterisk=0.4.0
Asterisk=0.1.10
Asterisk=1.0_rc1
Event History
Nov 16, 2005
CVE Published
07:42 AM
CVE Published
via MITRE·12:37 PM
Data Sourced
via MITRE·12:37 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3559?
CVE-2005-3559 is categorized as a critical vulnerability due to its ability to allow unauthorized access to sensitive files.
2
How do I fix CVE-2005-3559?
To mitigate CVE-2005-3559, update Asterisk to a version that is not vulnerable, specifically versions later than 1.2.0-beta1.
3
What types of attacks are possible with CVE-2005-3559?
CVE-2005-3559 allows remote attackers to exploit directory traversal to access and download confidential WAV files.
4
Which versions of Asterisk are affected by CVE-2005-3559?
CVE-2005-3559 affects Asterisk versions from 1.0.9 up to 1.2.0-beta1.
5
Is CVE-2005-3559 related to user authentication?
No, CVE-2005-3559 is a directory traversal vulnerability and does not involve user authentication mechanisms.