Schweregrad: : Crítico
  Data do informe: 21 julho 2015

  Descrição

An error in the "ast_parse_digest()" function (main/utils.c) when handling "HTTP Digest Authentication" information can be exploited to cause a stack-based buffer overflow via an overly long string. Successful exploitation if this vulnerability may allow execution of arbitrary code.

  Exposição das informações

Apply associated Trend Micro DPI Rules.

  Solução

  Trend Micro Deep Security DPI Rule Number: 1004959
  Trend Micro Deep Security DPI Rule Name: 1004959 - Asterisk HTTP Manager Stack Buffer Overflow Vulnerability

  Software infectado e versão:

  • Asterisk