Summary
The remote host is missing an update to asterisk
announced via advisory DSA 1126-1.
A problem has been discovered in the IAX2 channel driver of Asterisk, an Open Source Private Branch Exchange and telephony toolkit, which may allow a remote to cause au crash of the Asterisk server.
The old stable distribution (woody) is not affected by this problem.
Solution
For the stable distribution (sarge) this problem has been fixed in version 1.0.7.dfsg.1-2sarge3.
For the unstable distribution (sid) this problem will be fixed soon.
We recommend that you upgrade your asterisk packages.
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201126-1
Severity
Classification
-
CVE CVE-2006-2898 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities