CVE-2007-6170

Related Files

Gentoo Linux Security Advisory 200804-13

Posted Apr 14, 2008

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200804-13 - Multiple vulnerabilities have been found in Asterisk allowing for SQL injection, session hijacking and unauthorized usage. Versions less than 1.2.27 are affected.

tags | advisory, vulnerability, sql injection

systems | linux, gentoo

advisories | CVE-2007-6170, CVE-2007-6430, CVE-2008-1332

SHA-256 | 67da6681bc621e1c47a9b59a1836b85459c55a674e2f9489f48e2bca51d3ffd7

Download | Favorite | View

Debian Linux Security Advisory 1417-1

Posted Dec 2, 2007

Authored by Debian | Site debian.org

Debian Security Advisory 1417-1 - Tilghman Lesher discovered that the logging engine of Asterisk, a free software PBX and telephony toolkit performs insufficient sanitizing of call-related data, which may lead to SQL injection.

tags | advisory, sql injection

systems | linux, debian

advisories | CVE-2007-6170

SHA-256 | 053bb11054dac8fa583512f9cbc7f974fc8be1ed0b6ceeb7f24bf14961020c8f

Download | Favorite | View