PT-2007-7062 · Digium · Asterisk

Publicado 2007-11-30 · Atualizado 2018-10-26 · CVE-2007-6171

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Asterisk versions 1.4.x through 1.4.14 Asterisk versions C.x through C.1.0-beta5

Description The issue allows remote attackers to execute arbitrary SQL commands.

Recommendations For Asterisk versions 1.4.x through 1.4.14, update to version 1.4.15 or later. For Asterisk versions C.x through C.1.0-beta5, update to version C.1.0-beta6 or later.

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2007-6171

Produtos afetados

Asterisk

Referências · 13

• http://securityfocus.com/archive/1/484387/100/0/threaded · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-6171 · Aviso do Fabricante
• http://securitytracker.com/id?1019021 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-6171 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6171 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6171 · Nota de Segurança
• http://secunia.com/advisories/27873 · Nota
• https://osv.dev/vulnerability/CVE-2007-6171 · Aviso do Fabricante
• http://osvdb.org/38933 · Nota
• http://vupen.com/english/advisories/2007/4055 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38766 · Nota
• http://downloads.digium.com/pub/security/AST-2007-025.html · Aviso do Fabricante
• http://securityfocus.com/bid/26645 · Nota