DEBIAN-CVE-2005-3559
- Source
- https://security-tracker.debian.org/tracker/CVE-2005-3559
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-3559.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2005-3559
- Upstream
- Downstream
- Published
- 2005-11-16T07:42:00Z
- Modified
- 2026-09-08T06:47:22Z
- Summary
- [none]
- Details
-
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter.
- References
Affected packages
Debian:14 / asterisk
Package
- Name
- asterisk
- Purl
- pkg:deb/debian/asterisk?arch=source&distro=forky
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1:1.2.7.1.dfsg-2
Affected versions
0.*
0.1.11-3
0.1.11-3woody1
1:1.*
1:1.0.5-2
1:1.0.5-4
1:1.0.6-1
1:1.0.6-2
1:1.0.7-1
1:1.0.7.dfsg.1-1
1:1.0.7.dfsg.1-2
1:1.0.7.dfsg.1-2sarge1
1:1.0.7.dfsg.1-2sarge2
1:1.0.7.dfsg.1-2sarge3
1:1.0.7.dfsg.1-2sarge4
1:1.0.7.dfsg.1-2sarge5
1:1.0.7.dfsg.1-2sarge6
1:1.0.9.dfsg-1
1:1.0.9.dfsg-3
1:1.0.9.dfsg-4
1:1.0.9.dfsg-5
1:1.0.9.dfsg-6
1:1.2.0-beta1.dfsg-1
1:1.2.0-beta2.dfsg-1
1:1.2.0-beta2.dfsg-2
1:1.2.0-beta2.dfsg-3
1:1.2.0-rc1.dfsg-1
1:1.2.0-rc2.dfsg-1
1:1.2.0.dfsg-1
1:1.2.0.dfsg-2
1:1.2.0.dfsg-3
1:1.2.0.dfsg-4
1:1.2.0.dfsg-5
1:1.2.0.dfsg-6
1:1.2.1.dfsg-1
1:1.2.1.dfsg-2
1:1.2.1.dfsg-3
1:1.2.4.dfsg-1
1:1.2.4.dfsg-2
1:1.2.4.dfsg-3
1:1.2.4.dfsg-4
1:1.2.4.dfsg-5
1:1.2.4.dfsg-6
1:1.2.4.dfsg-6+b1
1:1.2.4.dfsg-7
1:1.2.7.1.dfsg-1