Asterisk Logger and Manager Format String Vulnerabilities

Bugtraq ID:	28311
Class:	Input Validation Error
CVE:	CVE-2008-1333
Remote:	Yes
Local:	No
Published:	Mar 18 2008 12:00AM
Updated:	Mar 20 2008 02:40PM
Credit:	Steve Davies and Brandon Kruse discovered these issues.
Vulnerable:	Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Asterisk Asterisk 1.6
Not Vulnerable:	Asterisk Asterisk 1.6 beta6

Asterisk Logger and Manager Format String Vulnerabilities

Asterisk is prone to multiple format-string vulnerabilities because the application fails to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function.

A remote attacker may potentially execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in a denial of service.

These issues affect versions prior to Asterisk Open Source 1.6.0-beta6.

Asterisk Logger and Manager Format String Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Asterisk Logger and Manager Format String Vulnerabilities

Solution:
The vendor has released updates. Please see the references for more information.

Asterisk Logger and Manager Format String Vulnerabilities

References:

• Asterisk Homepage (Asterisk)
  
• AST-2008-004: Format String Vulnerability in Logger and Manager (Asterisk Security Team )
  
• Asterisk Project Security Advisory - AST-2008-004 (Asterisk)