CVE-2008-1333: Asterisk Open Source

Medium severity, CVSS 5.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by (1) the ast_verbose logging API call, or (2) the astman_append function.

Affected products

• Asterisk Open Source: version 1.6.0_beta1 only; version 1.6.0_beta2 only; version 1.6.0_beta3 only; version 1.6.0_beta4 only; version 1.6.0_beta5 only

Published 2008-03-20. Last modified 2026-06-16.