CVE - CVE-2007-6170

CVE-ID
CVE-2007-6170	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via (1) ANI and (2) DNIS arguments.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20071129 AST-2007-026 - SQL Injection issue in cdr_pgsql URL:http://www.securityfocus.com/archive/1/archive/1/484388/100/0/threaded CONFIRM:http://downloads.digium.com/pub/security/AST-2007-026.html DEBIAN:DSA-1417 URL:http://www.debian.org/security/2007/dsa-1417 GENTOO:GLSA-200804-13 URL:http://security.gentoo.org/glsa/glsa-200804-13.xml SUSE:SUSE-SR:2008:005 URL:http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html BID:26647 URL:http://www.securityfocus.com/bid/26647 VUPEN:ADV-2007-4056 URL:http://www.vupen.com/english/advisories/2007/4056 SECTRACK:1019020 URL:http://securitytracker.com/id?1019020 SECUNIA:27827 URL:http://secunia.com/advisories/27827 SECUNIA:27892 URL:http://secunia.com/advisories/27892 SECUNIA:29242 URL:http://secunia.com/advisories/29242 SECUNIA:29782 URL:http://secunia.com/advisories/29782 XF:asterisk-cdrpqsql-sql-injection(38765) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/38765
Assigning CNA
N/A
Date Entry Created
20071129	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20071129)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org