CVE-2003-0779

CVE-2003-0779 corresponds to an SQL injection in the Asterisk Call Detail Record (CDR) logging. A remote attacker can modify the CallerID string to cause arbitrary SQL execution due to unsafe query construction in the CDR logging path. The NVD/metrics indicate a CVSSv2 base score of 7.5 (HIGH) wi...

CVE-2003-0779: Undefined Security Weakness

SQL injection vulnerability in the Call Detail Record CDR logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string...