2008-03-24 18:44:00 2018-10-11 22:33:14

The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it easier for remote attackers to hijack a manager session via a series of ID guesses.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
Asterisk Asterisknow Beta 6 (not an official CPE) Asterisk Asterisknow Beta 5 (not an official CPE) Asterisk Asterisknow 1.0 (not an official CPE) Asterisk Asterisk business edition C.1.0-beta8 (not an official CPE) Asterisk Asterisk business edition C.1.0-beta7 (not an official CPE) Asterisk Asterisk appliance developer kit 1.4 (not an official CPE) Asterisk Asterisk appliance developer kit 0.8 (not an official CPE) Asterisk Asterisk appliance developer kit 0.7 (not an official CPE) Asterisk Asterisk appliance developer kit 0.6 (not an official CPE) Asterisk Asterisk appliance developer kit 0.5 (not an official CPE) Asterisk Asterisk appliance developer kit 0.4 (not an official CPE) Asterisk Asterisk appliance developer kit 0.3 (not an official CPE) Asterisk Asterisk appliance developer kit 0.2 (not an official CPE) Asterisk Asterisk 1.6 (not an official CPE) Asterisk Asterisk 1.4 revision 95946 (not an official CPE) Asterisk Asterisk 1.4 beta (not an official CPE) Asterisk Asterisk 1.4.18.1 (not an official CPE) Asterisk Asterisk 1.4.17 (not an official CPE) Asterisk Asterisk 1.4.15 (not an official CPE) Asterisk Asterisk 1.4.16 (not an official CPE) Asterisk Asterisk 1.4.14 (not an official CPE) Asterisk Asterisk 1.4.13 (not an official CPE) Asterisk Asterisknow Beta 7 (not an official CPE) Asterisk Asterisk 1.4.12 (not an official CPE) Asterisk Asterisk 1.4.11 (not an official CPE) Asterisk Asterisk 1.4.10 (not an official CPE) Asterisk Asterisk 1.4.9 (not an official CPE) Asterisk Asterisk 1.4.8 (not an official CPE) Asterisk Asterisk 1.4.7 (not an official CPE) Asterisk Asterisk 1.4.6 (not an official CPE) Asterisk Asterisk 1.4.5 (not an official CPE) Asterisk Asterisk 1.4.4 (not an official CPE) Asterisk Asterisk 1.4.3 (not an official CPE) Asterisk Asterisk 1.4.2 (not an official CPE) Asterisk Asterisk 1.4.1 (not an official CPE) Asterisk S800i 1.0 (not an official CPE) Asterisk S800i 1.0.1 (not an official CPE) Asterisk S800i 1.0.2 (not an official CPE) Asterisk S800i 1.0.3 (not an official CPE) Asterisk S800i 1.1.0 (not an official CPE)