CVE-2005-2081

NameCVE-2005-2081
DescriptionStack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
Debian Bugs315532

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
asterisk (PTS)buster1:16.2.1~dfsg-1+deb10u2fixed
buster (security)1:16.28.0~dfsg-0+deb10u2fixed
bullseye1:16.28.0~dfsg-0+deb11u1fixed
bullseye (security)1:16.28.0~dfsg-0+deb11u2fixed
sid1:20.1.0~dfsg+~cs6.12.40431414-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
asterisksource(unstable)1:1.0.9.dfsg-1unimportant315532

Notes

Can only be exploited by users who already have the privilege to execute arbitrary commands
Search for package or bug name: Reporting problems