Fedora 15 : asterisk-1.8.3.2-1.fc15 (2011-3958)

The Asterisk Development Team has announced security releases for Asterisk branches 1.6.1, 1.6.2, and 1.8. The available security releases are released as versions 1.6.1.24, 1.6.2.17.2, and 1.8.3.2. These releases are available for immediate download at...

Fedora 15 : asterisk-1.8.3-1.fc15 (2011-2360)

The Asterisk Development Team has announced the release of Asterisk 1.8.3. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/ The release of Asterisk 1.8.3 resolves several issues reported by the community and would have not been possible...

Asterisk main/udptl.c Buffer Overflows (AST-2011-002)

Binary data 5802.prm...

AST-2011-001: Stack buffer overflow in SIP channel driver

Asterisk Project Security Advisory - AST-2011-001 Product Asterisk Summary Stack buffer overflow in SIP channel driver Nature of Advisory Exploitable Stack Buffer Overflow Susceptibility Remote Authenticated Sessions Severity Moderate Exploits Known No Reported On January 11, 2011 Reported By...

asterisk -- Exploitable Stack Buffer Overflow

The Asterisk Development Team reports: The releases of Asterisk 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.2, 1.8.1.2, and 1.8.2.1 resolve an issue when forming an outgoing SIP request while in pedantic mode, which can cause a stack buffer to be made to overflow if supplied with carefully...

CVE-2009-4966

SQL injection vulnerability in the AST ZipCodeSearch astaddresszipsearch extension 0.5.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the AST ZipCodeSearch astaddresszipsearch extension 0.5.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4966

CVE-2009-4966 is a SQL injection in the TYPO3 extension ast_addresszipsearch (ZipCodeSearch) version 0.5.4. The Red Hat/NVD entries confirm that remote attackers can execute arbitrary SQL commands via unspecified vectors. The impact is described as allowing unauthorized SQL execution; no specific...

CVE-2009-4966

SQL injection vulnerability in the AST ZipCodeSearch astaddresszipsearch extension 0.5.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Fedora 11 : asterisk-1.6.1.17-1.fc11 (2010-3724)

Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...

Fedora 12 : asterisk-1.6.1.17-1.fc12 (2010-3381)

Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...

Fedora Core 12 FEDORA-2009-12517 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-12517. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 11 FEDORA-2009-12506 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-12506. OpenVAS Vulnerability Test $Id: fcore200912506.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12506 asterisk Authors: Thomas Reinke Copyright: Copyright c 20...

Fedora 12 : asterisk-1.6.1.11-1.fc12 (2009-12517)

Update to 1.6.1.11 to fix AST-2009-010/CVE-2009-4055 http://downloads.asterisk.org/pub/security/AST-2009-010.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 10 : asterisk-1.6.0.19-1.fc10 (2009-12461)

Update to 1.6.0.19 to fix AST-2009-010/CVE-2009-4055 http://downloads.asterisk.org/pub/security/AST-2009-010.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora Core 10 FEDORA-2009-12461 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-12461. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 10 FEDORA-2009-12461 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-12461. OpenVAS Vulnerability Test $Id: fcore200912461.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12461 asterisk Authors: Thomas Reinke Copyright: Copyright c 20...

Fedora Core 10 FEDORA-2009-11126 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-11126. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 11 FEDORA-2009-11070 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-11070. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 9 FEDORA-2009-0973 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-0973. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...