Evil-DB LogoEvil-DB
← All CVEs

CVE-2005-3559

medium · 5

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter.

5
CVSS
20.2%
EPSS (exploit prob.)
97th
EPSS percentile
2005-11-16
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

VendorProductAffected versions
digiumasterisk0.1.0
digiumasterisk0.1.1
digiumasterisk0.1.2
digiumasterisk0.1.3
digiumasterisk0.1.4
digiumasterisk0.1.5
digiumasterisk0.1.6
digiumasterisk0.1.7
digiumasterisk0.1.8
digiumasterisk0.1.9
digiumasterisk0.1.10
digiumasterisk0.1.11
digiumasterisk0.1.12
digiumasterisk0.2.0
digiumasterisk0.3.0
digiumasterisk0.4.0
digiumasterisk0.5.0
digiumasterisk0.7.0
digiumasterisk0.7.1
digiumasterisk0.7.2
digiumasterisk1.0.0
digiumasterisk1.0.1
digiumasterisk1.0.2
digiumasterisk1.0.3
digiumasterisk1.0.4
digiumasterisk1.0.5
digiumasterisk1.0.6
digiumasterisk1.0.7
digiumasterisk1.0.8
digiumasterisk1.0.9
digiumasterisk1.0_rc1
digiumasterisk1.0_rc2
digiumasterisk1.2.0_beta1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-3559