CVE-2011-0495

Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary code via crafted caller ID data in vectors involving the (1) SIP channel driver, (2) URIENCODE dialplan function, or (3) AGI dialplan function.

• CWE-787

• http://downloads.asterisk.org/pub/security/AST-2011-001-1.6.2.diffPatch, Vendor Advisory
• http://downloads.asterisk.org/pub/security/AST-2011-001.htmlVendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053689.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053713.htmlThird Party Advisory
• http://osvdb.org/70518Broken Link
• http://secunia.com/advisories/42935Third Party Advisory
• http://secunia.com/advisories/43119Third Party Advisory
• http://secunia.com/advisories/43373Third Party Advisory
• http://www.debian.org/security/2011/dsa-2171Third Party Advisory
• http://www.securityfocus.com/archive/1/515781/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/45839Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0159Permissions Required
• http://www.vupen.com/english/advisories/2011/0281Permissions Required
• http://www.vupen.com/english/advisories/2011/0449Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64831Third Party Advisory, VDB Entry
• http://downloads.asterisk.org/pub/security/AST-2011-001-1.6.2.diffPatch, Vendor Advisory
• http://downloads.asterisk.org/pub/security/AST-2011-001.htmlVendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053689.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053713.htmlThird Party Advisory
• http://osvdb.org/70518Broken Link
• http://secunia.com/advisories/42935Third Party Advisory
• http://secunia.com/advisories/43119Third Party Advisory
• http://secunia.com/advisories/43373Third Party Advisory
• http://www.debian.org/security/2011/dsa-2171Third Party Advisory
• http://www.securityfocus.com/archive/1/515781/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/45839Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0159Permissions Required
• http://www.vupen.com/english/advisories/2011/0281Permissions Required
• http://www.vupen.com/english/advisories/2011/0449Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64831Third Party Advisory, VDB Entry

Published

Jan 20, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0489The server components in Objectivity/DB 10.0 do not require …
• CVE-2011-0490Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes …
• CVE-2011-0491The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x …
• CVE-2011-0492Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows…
• CVE-2011-0493Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might …
• CVE-2011-0494Directory traversal vulnerability in WebSEAL in IBM Tivoli A…
• CVE-2011-0496Unspecified vulnerability in Sybase EAServer 5.x and 6.x bef…
• CVE-2011-0497Directory traversal vulnerability in Sybase EAServer 6.x bef…
• CVE-2011-0498Stack-based buffer overflow in Nokia Multimedia Player 1.00.…
• CVE-2011-0499Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earl…
• CVE-2011-0500Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlie…
• CVE-2011-0501Stack-based buffer overflow in Music Animation Machine MIDI …