# CVEs published 2012-04-30

5 CVEs were published on April 30, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2414](https://cve.now/CVE-2012-2414.md): main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and A (no CVSS)
- [CVE-2012-2415](https://cve.now/CVE-2012-2415.md): Heap-based buffer overflow in chan\_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.1 (no CVSS)
- [CVE-2012-2416](https://cve.now/CVE-2012-2416.md): chan\_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3. (no CVSS)
- [CVE-2012-0863](https://cve.now/CVE-2012-0863.md): Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might (no CVSS)
- [CVE-2012-2111](https://cve.now/CVE-2012-2111.md): The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-04-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.