CVE-2006-2021 - Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface (ARI) web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter

Back Back to CVE browser

MEDIUM

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface (ARI) web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter

Published Apr 25, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.78%

Description

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface (ARI) web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used to determine existence of files.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://secunia.com/advisories/19744
third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://securityreason.com/securityalert/750
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/24806
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/431655/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17641
vdb-entryx_refsource_BIDExploitPatch
http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2006.1
x_refsource_MISCExploit
http://www.vupen.com/english/advisories/2006/1457
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2022
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25996
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19744		third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://securityreason.com/securityalert/750		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/24806		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/431655/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17641		vdb-entryx_refsource_BIDExploitPatch
http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2006.1		x_refsource_MISCExploit
http://www.vupen.com/english/advisories/2006/1457		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2022		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25996		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 25, 2006

Updated Aug 7, 2024

Reserved Apr 25, 2006

Link CVE-2006-2021

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-2021

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 25, 2006

Updated Aug 7, 2024

Link EUVD-2006-2022

GitHub

No data