CVE-2010-0685 Code injection in n/a
Attackers can inject metacharacters into the dialplan via crafted SIP messages, potentially executing arbitrary code or adding unauthorized call legs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-0685?
CVE-2010-0685 is a medium-severity code injection vulnerability in Digium Asterisk, published on 23 Feb 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern matches, allows context-dependent attackers to inject strings into the dialplan using metacharacters that are injected when the variable is expanded, as demonstrated using the Dial application to process a crafted SIP INVITE message that adds an unintended outgoing channel leg. NOTE: it could be argued that this is not a vulnerability in Asterisk, but a class of vulnerabilities that can occur in any program that uses this feature without the associated filtering functionality that is already available.
Which versions are affected by CVE-2010-0685?
It affects 1 product.
Products include Digium Asterisk.
How do I fix CVE-2010-0685?
Apply the vendor's patch.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2010-0685 being exploited?
There is no known exploitation of CVE-2010-0685 in the wild and no public exploit code.
Other vulnerabilities in Digium Asterisk
Sources
Also known as DEBIAN-CVE-2010-0685, GHSA-2w2c-jqh6-rwvr.