From 97a7e59635cc71f82e932d9f142ac58ffbfee431 Mon Sep 17 00:00:00 2001 From: Kevin Harwell Date: Thu, 20 Nov 2014 16:22:50 +0000 Subject: AMI permission escalation through DB dialplan function CVE: CVE-2014-8418 Origin: http://svnview.digium.com/svn/asterisk?view=rev&rev=428363 Bug: https://issues.asterisk.org/jira/browse/ASTERISK-24534 The DB dialplan function when executed from an external protocol (for instance AMI - the Asterisk Manager Interface), could result in a privilege escalation. Asterisk now inhibits the DB function from being executed from an external interface if the live_dangerously option is set to no. In the default configuration the manager interface is only accessible from localhost with no users configured and no AGI script is installed, however using such interfaces is very common. See Also: http://downloads.asterisk.org/pub/security/AST-2014-018.html --- funcs/func_db.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/funcs/func_db.c b/funcs/func_db.c index ebe58f0..b56fef9 100644 --- a/funcs/func_db.c +++ b/funcs/func_db.c @@ -351,7 +351,7 @@ static int load_module(void) { int res = 0; - res |= ast_custom_function_register(&db_function); + res |= ast_custom_function_register_escalating(&db_function, AST_CFE_BOTH); res |= ast_custom_function_register(&db_exists_function); res |= ast_custom_function_register_escalating(&db_delete_function, AST_CFE_READ); res |= ast_custom_function_register(&db_keys_function); -- 2.1.3