Debian Security Advisory DSA 1358-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1358-1. OpenVAS Vulnerability Test $Id: deb13581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1358-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-2294

CVE-2007-2294 : The Manager Interface in Asterisk versions prior to 1.2.18 and prior to 1.4.3 is vulnerable. An attacker can cause a denial of service (crash) by using MD5 authentication to log in as a user that has no password defined in manager.conf, triggering a NULL pointer dereference. The v...