{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-08-30T00:00:00", "descriptions": [{"lang": "en", "value": "channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certain uses of peer credentials, which allows remote authenticated users to bypass intended outbound-call restrictions by leveraging the availability of these credentials."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-10-31T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://downloads.asterisk.org/pub/security/AST-2012-013.html"}, {"name": "50687", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/50687"}, {"name": "50756", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/50756"}, {"name": "1027461", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1027461"}, {"name": "DSA-2550", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2012/dsa-2550"}, {"name": "55335", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/55335"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2012-4737", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certain uses of peer credentials, which allows remote authenticated users to bypass intended outbound-call restrictions by leveraging the availability of these credentials."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://downloads.asterisk.org/pub/security/AST-2012-013.html", "refsource": "CONFIRM", "url": "http://downloads.asterisk.org/pub/security/AST-2012-013.html"}, {"name": "50687", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/50687"}, {"name": "50756", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/50756"}, {"name": "1027461", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1027461"}, {"name": "DSA-2550", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2012/dsa-2550"}, {"name": "55335", "refsource": "BID", "url": "http://www.securityfocus.com/bid/55335"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T20:42:55.248Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://downloads.asterisk.org/pub/security/AST-2012-013.html"}, {"name": "50687", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/50687"}, {"name": "50756", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/50756"}, {"name": "1027461", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1027461"}, {"name": "DSA-2550", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2012/dsa-2550"}, {"name": "55335", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/55335"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2012-4737", "datePublished": "2012-08-31T14:00:00", "dateReserved": "2012-08-30T00:00:00", "dateUpdated": "2024-08-06T20:42:55.248Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "F6344E43-E8AA-4340-B3A7-72F5D6A5D184", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "4C170C1C-909D-4439-91B5-DB1A9CD150C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "EE821BE5-B1D3-4854-A700-3A83E5F15724", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "149C57CA-0B4B-4220-87FC-432418D1C393", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "035595D5-BBEC-4D85-AD7A-A2C932D2BA70", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:beta5:*:*:*:*:*:*", "matchCriteriaId": "6DAF5655-F09F-47F8-AFA6-4B95F77A57F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "F8E001D8-0A7B-4FDD-88E3-E124ED32B81C", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "9D5CFFBD-785F-4417-A54A-F3565FD6E736", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "D30EF999-92D1-4B19-8E32-1E4B35DE4EA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "A67D156B-9C43-444F-ADEC-B21D99D1433C", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "893EB152-6444-43DB-8714-9735354C873A", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "F8447EE7-A834-41D7-9204-07BD3752870C", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "3C04F2C9-5672-42F2-B664-A3EE4C954C29", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "33465668-4C91-4619-960A-D26D77853E53", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "CAD08674-0B44-44EA-940B-6812E2D5077D", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "EEE87710-A129-43AA-BA08-8001848975FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "8F582C6E-5DA0-4D72-A40E-66BDBC5CF2B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "2E7CEBB8-01B3-4A05-AFE8-37A143C9833E", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "522733A7-E89E-4BFD-AC93-D6882636E880", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "2FAC47DD-B613-43E4-B9BF-6120B81D9789", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.3:rc1:*:*:*:*:*:*", "matchCriteriaId": "86D20CB5-60E8-405E-B387-CF80C7DA5E07", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.3:rc2:*:*:*:*:*:*", "matchCriteriaId": "71AB5A01-5961-4053-9111-CF32C6473A00", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.3:rc3:*:*:*:*:*:*", "matchCriteriaId": "77D8E1DC-041F-4B87-AF9A-E0EC4D6A4BD8", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "7CCCB892-30CE-4BEF-904E-5D957F94D0EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "F156798F-F2EF-4366-B17E-03165AB437D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "9EFBB9A6-DD1D-436E-919F-74A3E4F40396", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "054E34C8-B6A5-48C7-938E-D3C268E0E8BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.4:rc1:*:*:*:*:*:*", "matchCriteriaId": "1DCECA72-533A-4A95-AB19-20C5F09A1B01", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.4:rc2:*:*:*:*:*:*", "matchCriteriaId": "0E2309F8-AFEE-4150-99D1-BA606432ED73", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.4:rc3:*:*:*:*:*:*", "matchCriteriaId": "7785F282-BFA0-400A-8398-872ACCA4BF37", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "1278D3FB-78C6-4F7D-A845-0A93D4F6E2B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "C00A6EFB-A848-46D3-AAD7-FD8140007E42", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "CB6E3972-5C53-4B6D-BFE1-67E1122EA013", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "048617A0-A783-4519-A947-35220D4CD786", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "DD493A41-E686-444C-A34E-412804510F77", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.5:rc1:*:*:*:*:*:*", "matchCriteriaId": "87D25FD6-CC3A-4AB0-B7B1-67D07386F99D", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "3C402E9E-09CC-4EFA-AC27-156437B05B22", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "C8A41F9C-D2F4-47A9-80CD-2B1BF6B0CB63", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.6.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "627FF5B9-E5A8-4DBC-A891-B175011E72A0", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.6.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "6146EB2E-BA32-4408-B10B-A711EC39C580", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.6.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "1C863324-05AE-4FCA-BD2E-39040A468DCE", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "A85F51E7-0AAE-4F3B-9F90-BD2E31255822", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "315FB0D4-D4A4-4369-BFB8-F2CAEB429015", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.7.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "DC74D6C5-F410-4B68-AF92-056B727193A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "B70911F8-A526-4600-8198-03FF4CCB28DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "BA60A9C9-C2EF-4971-BEFB-FF687DAEF2F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.8.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "BAFB22FA-CC24-4AFE-AC83-2D044563F7CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.8.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "00F3EB0D-7C63-46B5-BA95-8486B9716C78", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.8.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "00C1BF3B-7593-478D-9AAA-153901C70286", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.8.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "82423EC2-FA29-4AF6-86C3-6AC6DFDC4DC5", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.8.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "5F86406A-0936-4A06-88FB-4137A64498EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "672CE4C0-EBD6-470B-937E-810FF1C4CDBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "88DB1105-74D8-4312-9D02-D1E21F2E785C", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "404C0557-6229-4D90-BFDD-54AFFCCE6A19", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.9.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "6D1D26CC-891F-4396-B7D7-30D712829E71", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.9.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "F25B61EA-F4D1-452A-9D96-B8DFDD719B0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.9.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "9324AB96-EC99-4F04-A0A9-00F936C86EFA", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "1B8B5E76-4A74-4E88-8A6F-C23538B7642A", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "BDB6BBCA-47CE-49B8-9706-AFDE4BE46550", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "8BFF65E2-692B-4C39-88FC-6DED8D9A7258", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "5260E309-9320-4DB8-A918-7D215BF95D2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.10.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "60AFF340-A866-4CFE-9334-53B95FD4AA59", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.10.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "74E50309-CD7D-41F7-97DA-A7E451D0796A", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.10.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "6FD3F8F8-820E-4C29-9F8F-023D1DB999CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.10.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "C33A6419-0D00-49D6-9A48-2B633610AAED", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "447E07C9-4A25-418D-B53F-609B78EE4C21", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.11.0:*:*:*:*:*:*:*", "matchCriteriaId": "8E8AE686-B618-4B0D-BD27-1F96295E964D", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.11.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "E9751C0A-84F5-4A43-8282-12A9DE559569", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.11.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "F67E2694-F6F1-482C-91F2-D9FD856EA31B", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.11.1:*:*:*:*:*:*:*", "matchCriteriaId": "5E2D53AA-8D50-445F-9500-2F580F260DC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.12:*:*:*:*:*:*:*", "matchCriteriaId": "8D9D7D88-D64F-4F54-8C84-6AC45FBD36F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.12.0:*:*:*:*:*:*:*", "matchCriteriaId": "F67AB282-591C-4ED7-9750-C593A38D5D7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.12.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "C9F8F881-2BF7-44AB-8756-54A06801EB11", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.12.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "36EFF3C4-4D00-4BC5-94B9-403BB00C6AB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.12.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "5E434F10-395E-426E-A988-4CDA504577D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.13.0:*:*:*:*:*:*:*", "matchCriteriaId": "8880AE7C-3E44-4B76-B500-E93868D4CF5D", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.13.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "7C94269D-A271-42AC-A44C-102C814E564B", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.13.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "E7E5B826-D3D5-4D2D-BB4D-2C1BEDE92456", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.13.1:*:*:*:*:*:*:*", "matchCriteriaId": "5BA564F7-7A69-4805-8C8C-C2EB5E12A6E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.14.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "DF6FA464-F9D3-4674-844B-A2B2E2C42A51", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.14.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "44722C8B-BB37-4444-A58A-F01D0B3B4DDA", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.14.1:*:*:*:*:*:*:*", "matchCriteriaId": "C4FABFDB-D99A-4F83-8FEE-3BFA36BA4061", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.15.0:*:*:*:*:*:*:*", "matchCriteriaId": "A842E112-8974-4E74-AD56-1DEF5B5DD9F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:1.8.15.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "D9ACBC01-8A9D-43A5-A825-1CC9670417A6", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:digium:asterisk:10.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "687ED3CE-67C4-410D-8AF4-C769015598F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.0.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "30E918CD-89C4-42DA-9709-E50E0A3FA736", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.0.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "DA57FA15-D0D7-4A97-9C25-6F6566940098", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.0.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "A1C45300-A2CF-40E7-AB67-23DC24C31A1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.0.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "958081DC-1D77-45CD-A940-C7A1AB42C7BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.0.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "298A879D-4F65-4523-A752-D17C4F81B822", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "37AB07BE-54C4-4972-A05F-D1E2CF4363CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "EBC63564-A84E-463D-8312-DDF1C6B7796F", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.1.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "62A0906E-B631-4F3A-9ABC-9A43A43220BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.1.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "C6314ADA-2849-416D-966E-C01C322EF904", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "8B6CB1DD-614A-4B3D-99AE-9B1341427024", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "CC95B04F-3746-4F1C-8428-A1FA10253E14", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "20819080-E0AB-4879-B4CF-A154D6F7EF6F", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "C6C45753-E2CC-4F7C-B8DA-3D8CF255EA22", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.2.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "5A080197-D6AA-4FDC-888E-51D1C8251E34", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.2.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "1F08D930-D4C1-4C63-875C-171C46AE97C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.2.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "1AA43D7D-AEAD-47CB-BFA5-B73004A1A7A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.2.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "B5ED5F6F-166D-4610-8939-A33AD45F1ADE", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "1D40002A-564E-425C-BA2A-7C4A8F8DAFD7", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "521C4DB2-7127-4BA9-94FC-AB0E9E06FE2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.3.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "8C905DC1-8AB8-4D83-BB5B-FA4DABC58229", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.3.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "ECC74B5D-97A1-46FF-AFA3-5D5E4A0BF3A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "F2D98C7C-94A8-4348-AF22-04A41FB6F8EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "85D39A99-E9A6-4860-BC61-56CA2FC3238B", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.4.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "845DA0A4-1983-4E82-99C8-B7FBF47C632E", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.4.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "5A63FBB7-F1CF-4603-848F-980742D2ED36", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.4.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "10B2084F-3AF4-4008-899C-6C1E43715201", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "217C13A5-9F8A-4392-858F-2FC88B03EB0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "6B282462-900C-492E-98DE-65364E62F5E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "687784F0-9ACC-435D-81F9-1E1B0F61010C", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.5.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "9D7D020C-FE32-408B-BE37-58835FD3D95F", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.5.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "39B7938F-7370-4F67-B0CD-1C14DE2E4E7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "AC587195-5973-423B-8BF9-3E0B27363B76", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "1FBE5780-D503-46D1-BE04-4CB7B662B5DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.6.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "CB19323D-208F-45F9-85F3-BAA5D1BC3AA6", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.6.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "09334CAB-9ADB-49BB-BE83-BBAC6A7A9F47", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "DC6DEEF5-7277-4E38-9233-E3612CD77CCF", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "75A0D613-3D04-4902-9707-E743F30CF1A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.7.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "54AB61A7-E143-4BEC-8658-68FF615B007E", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:digium:certified_asterisk:1.8.11:cert:*:*:*:*:*:*", "matchCriteriaId": "C63C46CC-02E2-40AF-8281-F2FB5D89823A", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:certified_asterisk:1.8.11:cert1:*:*:*:*:*:*", "matchCriteriaId": "71BAF2A7-024D-475A-88C0-0F5ADE3CA286", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:certified_asterisk:1.8.11:cert2:*:*:*:*:*:*", "matchCriteriaId": "82F91FE8-C320-466B-AF08-67319A00A2BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:certified_asterisk:1.8.11:cert3:*:*:*:*:*:*", "matchCriteriaId": "DCFF0E1C-B455-4C18-8AA1-10408234327B", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:certified_asterisk:1.8.11:cert4:*:*:*:*:*:*", "matchCriteriaId": "738F68B3-2C5E-4A09-8FF4-2D034ED0C54D", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:certified_asterisk:1.8.11:cert5:*:*:*:*:*:*", "matchCriteriaId": "6A60C223-AD68-4BFF-91C1-2C7E9F727AA6", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:certified_asterisk:1.8.11:cert6:*:*:*:*:*:*", "matchCriteriaId": "4C313F81-8B38-4845-B1C7-CBB23D7C99B6", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:digium:asterisk:10.5.2:*:digiumphones:*:*:*:*:*", "matchCriteriaId": "E65E012A-49B6-4796-B1FA-A83C9248D0EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.6.0:*:digiumphones:*:*:*:*:*", "matchCriteriaId": "9F4C24B7-22E3-4E56-9B9F-414101B627FC", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.6.1:*:digiumphones:*:*:*:*:*", "matchCriteriaId": "1813B898-F957-40D7-AF9A-064FB57D5C82", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:10.7.0:*:digiumphones:*:*:*:*:*", "matchCriteriaId": "C5D07DB0-7C6A-4490-8FD0-DC83568E0421", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:digium:asterisk:c.3.0:-:business:*:*:*:*:*", "matchCriteriaId": "78E8936C-033B-49E6-BB39-D5BBBC80EB55", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:c.3.1.0:-:business:*:*:*:*:*", "matchCriteriaId": "5D05D04F-CD6C-4A73-885C-306D7A5CC7C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:c.3.1.1:-:business:*:*:*:*:*", "matchCriteriaId": "3805B5F3-A4CD-469F-9F8A-A271A79A2B7C", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:c.3.2.2:-:business:*:*:*:*:*", "matchCriteriaId": "9FAEBE5E-378A-40DC-B2B9-31F6D1305BCE", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:c.3.2.3:-:business:*:*:*:*:*", "matchCriteriaId": "617B3FE8-39E3-41C0-9348-9507DA43DE93", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:c.3.3.2:-:business:*:*:*:*:*", "matchCriteriaId": "04AB4C82-71BB-49B7-B4F3-4E75EFB5F1A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:c.3.6.2:-:business:*:*:*:*:*", "matchCriteriaId": "78B55176-E269-411B-974A-B5D2CE8E08C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:c.3.6.3:-:business:*:*:*:*:*", "matchCriteriaId": "9BCF12B0-4B8D-499D-B5DE-FB0CD9EEC3B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:c.3.6.4:-:business:*:*:*:*:*", "matchCriteriaId": "9ED68059-F0E5-4B1B-B633-466D92F38346", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:c.3.7.5:-:business:*:*:*:*:*", "matchCriteriaId": "BFE16F42-025D-4C9D-AD4A-08FDEF957F09", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certain uses of peer credentials, which allows remote authenticated users to bypass intended outbound-call restrictions by leveraging the availability of these credentials."}, {"lang": "es", "value": "channels/chan_iax2.c en Asterisk Open Source v1.8.x antes de v1.8.15.1 y v10.x antes de v10.7.1, Certified Asterisk v1.8.11-1.8.11 antes de cert7, Digiumphones Asterisk v10.xx-digiumphones antes de v10.7.1-digiumphones y Asterisk Business Edition C.3.x antes de C.3.7.6 no hace cumplir las reglas de ACL durante ciertos usos del par de credenciales, lo que permite a usuarios remotos autenticados eludir las restricciones de llamadas de salida aprovech\u00e1ndose de la disponibilidad de estas credenciales.\r\n"}], "id": "CVE-2012-4737", "lastModified": "2024-11-21T01:43:26.073", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-08-31T14:55:01.387", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://downloads.asterisk.org/pub/security/AST-2012-013.html"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/50687"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/50756"}, {"source": "[email protected]", "url": "http://www.debian.org/security/2012/dsa-2550"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/55335"}, {"source": "[email protected]", "url": "http://www.securitytracker.com/id?1027461"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://downloads.asterisk.org/pub/security/AST-2012-013.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/50687"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/50756"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2012/dsa-2550"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/55335"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1027461"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "[email protected]", "type": "Primary"}]}

{}