CVE-2007-6170 - CVE Reference - Advisories

CVE Reference: CVE-2007-6170

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-6170

Description: SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via (1) ANI and (2) DNIS arguments.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/38765 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html ST 1019020 SAID Secunia Advisory: SA29242 Secunia Advisory: SA29782 Secunia Advisory: SA27827 Secunia Advisory: SA27892 GENTOO http://security.gentoo.org/glsa/glsa-200804-13.xml DEBIAN http://www.debian.org/security/2007/dsa-1417 CONFIRM http://downloads.digium.com/pub/security/AST-2007-026.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/484388/100/0/threaded BID 26647

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	CS-Cart "cs_cookies" SQL Injection Vulnerability

2.	Drupal Content Construction Kit Script Insertion Vulnerabilities

3.	HP OpenView Select Identity Connectors Information Disclosure

4.	rPath update for libtiff

5.	Gentoo update for mysql

6.	Gentoo update for realplayer

7.	Gentoo update for yelp

8.	Cisco ASA and PIX Security Appliances Multiple Vulnerabilities

9.	SUSE update for IBMJava5-JRE and java-1_5_0-ibm

10.	IBM AIX "swcons" Command Privilege Escalation Vulnerability