CVE-2007-1595: High severity Asterisk Asterisk vulnerability

Published Mar 22, 2007

Updated

The Asterisk Extension Language (AEL) in pbx/pbxael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form.

Affected Software

1 affected component

Asterisk Asterisk=1.2.13

Remediation

Patch Available

http://svn.digium.com/view/asterisk?rev=59073&view=rev

Event History

Mar 22, 2007

CVE Published

11:19 PM

Mar 23, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1595?

CVE-2007-1595 is considered to have a significant impact as it allows remote attackers to execute arbitrary extensions.

How do I fix CVE-2007-1595?

To fix CVE-2007-1595, update to a newer version of Asterisk that addresses this vulnerability.

Which versions of Asterisk are affected by CVE-2007-1595?

CVE-2007-1595 affects Asterisk version 1.2.13.

How can CVE-2007-1595 impact my system?

CVE-2007-1595 can lead to unauthorized access or execution of commands by allowing attackers to specify invalid extensions.

What is Asterisk's Extension Language (AEL) vulnerability in CVE-2007-1595?

The vulnerability in CVE-2007-1595 involves Asterisk's Extension Language failing to properly generate extensions, which can be exploited by attackers.