Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs  Black Box Testing  Vulnerability Assessment  Vulnerability Scanner SecuriTeam™ in Your Inbox   E-mail this article to a friend New vulnerability? New tool? Tell us	Asterisk Logger and Manager Format String Vulnerability 19 Mar. 2008    Summary Logging messages displayed using the Asterisk ast_verbose logging API call are not displayed as a character string, they are displayed as a format string. Output as a result of the Manager command "command" is not appended to the resulting response message as a character string, it is appended as a format string. It is possible in both instances for an attacker to provide a formatted string as a value for input which can cause a crash.   Credit: The information has been provided by Joshua Colp. The original article can be found at: http://downloads.digium.com/pub/security/AST-2008-004.html    Details Audit your web server for security holes - see what the hackers see. Sign up for a scan today - risk free! Vulnerable Systems:  * Asterisk Open Source versions prior to 1.6.0-beta6 Immune Systems:  * Asterisk Open Source version 1.6.0-beta6 Resolution: Input given to both the ast_verbose logging API call and astman_append function is now interpreted as a character string and not as a format string. Bugs: The following two bug reports provide more information about this vulnerability: http://bugs.digium.com/view.php?id=12205 http://bugs.digium.com/view.php?id=12206 CVE Information: CVE-2008-1333  Comments: Subject:   Date:  From:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Multiple Vendor rdesktop Vulnerabilities PHP GENERATE_SEED() Weak Random Number Seed Vulnerability PHP Multibyte Shell Command Escaping Bypass Vulnerability SugarCRM Community Edition Local File Disclosure Vulnerability Wordpress Cookie Integrity Protection Vulnerability Joomla Component Jom Comment SQL Injection Vulnerability Oracle Application Express Privilege Escalation Vulnerability libpng Zero-Length Chunks Incorrect Handling IBM DB2 Universal Database Administration Server File Creation Vulnerability IBM DB2 Universal Database db2dasStartStopFMDaemon Buffer Overflow Vulnerability Python Zlib Extension Module Buffer Overflow Incorrect Input Validation In PyString_FromStringAndSize() Leads to Multiple Buffer Overflows Festival Command Execution Vulnerability F5 BIG-IP Management Interface Perl Injection SCO UnixWare pkgadd Directory Traversal Vulnerability  Featured Articles Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability Adobe Acrobat Javascript PDF Security Feature Bypass and Memory Corruption Vulnerabilities Multiple Vendor rdesktop Vulnerabilities Wonderware SuiteLink Denial of Service Vulnerability PHP Multibyte Shell Command Escaping Bypass Vulnerability Akamai Download Manager Arbitrary Program Execution Vulnerability SugarCRM Community Edition Local File Disclosure Vulnerability
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2008 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®