CVE-2005-2081: Digium Asterisk

Medium severity, CVSS 5.0. EPSS: 4.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character.

Affected products

• Digium Asterisk: version 1.0.7 only

Published 2005-07-05. Last modified 2026-06-16.