Multiple Asterisk Products Dialplan Functions Remote Privilege Escalation Vulnerability

Bugtraq ID:	64367
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 16 2013 12:00AM
Updated:	Dec 16 2013 12:00AM
Credit:	Matt Jordan
Vulnerable:	Asterisk Certified Asterisk 1.8.15 Asterisk Certified Asterisk 1.8.11 Asterisk Certified Asterisk 11.2-cert2 Asterisk Certified Asterisk 11.2 Asterisk Certified Asterisk 1.8.15-cert3 Asterisk Certified Asterisk 1.8.15-cert2 Asterisk Certified Asterisk 1.8.15-cert1 Asterisk Certified Asterisk 1.8.11-cert7 Asterisk Certified Asterisk 1.8.11-cert6 Asterisk Certified Asterisk 1.8.11-cert4 Asterisk Certified Asterisk 1.8.11-cert2 Asterisk Certified Asterisk 1.8.11-cert10 Asterisk Certified Asterisk 1.8.11-cert1 Asterisk Asterisk Open Source 11.5.1 Asterisk Asterisk Open Source 11.2.2 Asterisk Asterisk Open Source 11.2.1 Asterisk Asterisk Open Source 11.2 Asterisk Asterisk Open Source 11.1.2 Asterisk Asterisk Open Source 10.12.3 Asterisk Asterisk Open Source 10.12.2 Asterisk Asterisk Open Source 10.12.1 Asterisk Asterisk Open Source 10.12 Asterisk Asterisk Open Source 1.8.23 Asterisk Asterisk Open Source 1.8.20 2 Asterisk Asterisk Open Source 1.8.20 1 Asterisk Asterisk Open Source 1.8.20 0 Asterisk Asterisk Open Source 11.5 Asterisk Asterisk Open Source 11.1.1 Asterisk Asterisk Open Source 11.1.0 Asterisk Asterisk Open Source 10.7.1 Asterisk Asterisk Open Source 10.7 Asterisk Asterisk Open Source 10.11.1 Asterisk Asterisk Open Source 10.11.0 Asterisk Asterisk Open Source 1.8.3.1 Asterisk Asterisk Open Source 1.8.23.1 Asterisk Asterisk Open Source 1.8.19.1 Asterisk Asterisk Open Source 1.8.19.0 Asterisk Asterisk Open Source 1.8.15.1 Asterisk Asterisk Digiumphones 10.7.1-digiumphones Asterisk Asterisk Digiumphones 10.5.2-digiumphones Asterisk Asterisk Digiumphones 10.5.1-digiumphones Asterisk Asterisk Digiumphones 10.12.3-digiumphones Asterisk Asterisk Digiumphones 10.12.2-digiumphones Asterisk Asterisk Digiumphones 10.12.1-digiumphones Asterisk Asterisk Digiumphones 10.12.0-digiumphones Asterisk Asterisk Digiumphones 10.11.1-digiumphones Asterisk Asterisk Digiumphones 10.11.0-digiumphones
Not Vulnerable:	Asterisk Certified Asterisk 11.2-cert3 Asterisk Certified Asterisk 1.8.15-cert4 Asterisk Asterisk Open Source 11.6.1 Asterisk Asterisk Open Source 10.12.4 Asterisk Asterisk Open Source 1.8.24.1 Asterisk Asterisk Digiumphones 10.12.4-digiumphones

Multiple Asterisk Products Dialplan Functions Remote Privilege Escalation Vulnerability

Multiple Asterisk products are prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to modify files or execute arbitrary code with elevated privileges within the context of the affected application.

The following products are vulnerable:

Asterisk Open Source
Certified Asterisk
Asterisk Digiumphones

Multiple Asterisk Products Dialplan Functions Remote Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Asterisk Products Dialplan Functions Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Asterisk Products Dialplan Functions Remote Privilege Escalation Vulnerability

References:

• AST-2013-007: Asterisk Manager User Dialplan Permission Escalation (Asterisk Security Team)
  
• Asterisk Homepage (Asterisk)
  
• Prevent Asterisk functions that are 'dangerous' from being executed from externa (Asterisk)