CVE-2006-4346

CVE-2006-4346 describes a critical vulnerability in Asterisk 1.2.10 where client-controlled variables in the Record function can be manipulated. This allows remote attackers to execute arbitrary code via format string specifiers or overwrite files through directory traversal, exemplified by the CALLERIDNAME variable. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.