7.0Hoch
CVE-2025-1131Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation
Beschreibung
A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package. When Asterisk is started via this script (common in SysV init or FreePBX environments), it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating ownership or permissions. Non-root users with legitimate write access to /etc/asterisk can exploit this behaviour by placing malicious scripts in the startup.d directory, which will then execute with root privileges upon service restart.
Schwachstellentyp (CWE):
CWE-427
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
CPE-Treffer (NVD) (30)
cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*< 18.26.3cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*≥ 20.0.0 < 20.15.1cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*≥ 21.0.0 < 21.10.1cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*≥ 22.0.0 < 22.5.1cpe:2.3:a:sangoma:certified_asterisk:18.9:cert1:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert1-rc1:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert10:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert11:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert12:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert13:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert14:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert15:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert2:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert3:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert4:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert5:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert6:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert7:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert8:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert8-rc1:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert8-rc2:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:18.9:cert9:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc1:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:20.7:cert1-rc2:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:20.7:cert2:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:20.7:cert3:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:20.7:cert4:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:20.7:cert5:*:*:*:*:*:*cpe:2.3:a:sangoma:certified_asterisk:20.7:cert6:*:*:*:*:*:*