CVE-2008-1333

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that…

published March 20, 2008

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by (1) the ast_verbose logging API call, or (2) the astman_append function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03222 · 88.1th percentile
Published
2008-03-20T00:00Z
EPSS history
Timeline
  • 20 MAR 00:00Z
    Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that…
    cvelistv5