Gravità: : Critico
  Data notifica: 21 luglio 2015

  Descrizione

An error in the "ast_parse_digest()" function (main/utils.c) when handling "HTTP Digest Authentication" information can be exploited to cause a stack-based buffer overflow via an overly long string. Successful exploitation if this vulnerability may allow execution of arbitrary code.

  Informazioni esposizione:

Apply associated Trend Micro DPI Rules.

  Soluzioni

  Trend Micro Deep Security DPI Rule Number: 1004959
  Trend Micro Deep Security DPI Rule Name: 1004959 - Asterisk HTTP Manager Stack Buffer Overflow Vulnerability

  Software e versione interessati:

  • Asterisk