CVE-2011-1599

manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header.

• CWE-20

• http://downloads.digium.com/pub/security/AST-2011-006.htmlVendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058922.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059702.html
• http://openwall.com/lists/oss-security/2011/04/22/6
• http://secunia.com/advisories/44197Vendor Advisory
• http://secunia.com/advisories/44529
• http://securitytracker.com/id?1025433
• http://www.debian.org/security/2011/dsa-2225
• http://www.securityfocus.com/bid/47537
• http://www.vupen.com/english/advisories/2011/1086Vendor Advisory
• http://www.vupen.com/english/advisories/2011/1107
• http://www.vupen.com/english/advisories/2011/1188
• http://downloads.digium.com/pub/security/AST-2011-006.htmlVendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058922.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059702.html
• http://openwall.com/lists/oss-security/2011/04/22/6
• http://secunia.com/advisories/44197Vendor Advisory
• http://secunia.com/advisories/44529
• http://securitytracker.com/id?1025433
• http://www.debian.org/security/2011/dsa-2225
• http://www.securityfocus.com/bid/47537
• http://www.vupen.com/english/advisories/2011/1086Vendor Advisory
• http://www.vupen.com/english/advisories/2011/1107
• http://www.vupen.com/english/advisories/2011/1188

Published

Apr 27, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1593Multiple integer overflows in the next_pidmap function in ke…
• CVE-2011-1594A flaw was found in Spacewalk, as used in Red Hat Network Sa…6.5
• CVE-2011-1595Directory traversal vulnerability in the disk_create functio…
• CVE-2011-1596Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-1597OpenVAS Manager v2.0.3 allows plugin remote code execution.8.8
• CVE-2011-1598The bcm_release function in net/can/bcm.c in the Linux kerne…
• CVE-2011-1602The su utility on Cisco Unified IP Phones 7900 devices (aka …
• CVE-2011-1603Cisco Unified IP Phones 7900 devices (aka TNP phones) with s…
• CVE-2011-1604Memory leak in Cisco Unified Communications Manager (aka CUC…
• CVE-2011-1605Unspecified vulnerability in Cisco Unified Communications Ma…
• CVE-2011-1606Unspecified vulnerability in Cisco Unified Communications Ma…
• CVE-2011-1607Directory traversal vulnerability in Cisco Unified Communica…