Back
CVE-2005-3559
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter.
Published: Nov 16, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (33)
| Vendor | Product | Version |
|---|---|---|
| digium | asterisk | 0.1.0 |
| digium | asterisk | 0.1.1 |
| digium | asterisk | 0.1.2 |
| digium | asterisk | 0.1.3 |
| digium | asterisk | 0.1.4 |
| digium | asterisk | 0.1.5 |
| digium | asterisk | 0.1.6 |
| digium | asterisk | 0.1.7 |
| digium | asterisk | 0.1.8 |
| digium | asterisk | 0.1.9 |
| digium | asterisk | 0.1.10 |
| digium | asterisk | 0.1.11 |
| digium | asterisk | 0.1.12 |
| digium | asterisk | 0.2.0 |
| digium | asterisk | 0.3.0 |
| digium | asterisk | 0.4.0 |
| digium | asterisk | 0.5.0 |
| digium | asterisk | 0.7.0 |
| digium | asterisk | 0.7.1 |
| digium | asterisk | 0.7.2 |
…and 13 more
GitHub Security Advisory GHSA-429c-7p43-rw2j
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows...
References (20)
- http://osvdb.org/20577
- http://secunia.com/advisories/17459 Vendor Advisory
- http://secunia.com/advisories/19872
- http://securitytracker.com/id?1015164
- http://www.assurance.com.au/advisories/200511-asterisk.txt Exploit, Vendor Advisory
- http://www.debian.org/security/2006/dsa-1048
- http://www.securityfocus.com/archive/1/415990/30/0/threaded
- http://www.securityfocus.com/bid/15336
- http://www.vupen.com/english/advisories/2005/2346
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23002
- http://osvdb.org/20577
- http://secunia.com/advisories/17459 Vendor Advisory
- http://secunia.com/advisories/19872
- http://securitytracker.com/id?1015164
- http://www.assurance.com.au/advisories/200511-asterisk.txt Exploit, Vendor Advisory
Risk Scores
CVSS Score
5.0 / 10
EPSS Score
20.16%
Top 3% most likely to be exploited
Threat Score
26 / 100
Data Sources
NVD
EPSS
GitHub