Four new security vulnerabilities in Asterisk - time to upgrade!
March 21st, 2008 by Dan YorkEarlier this week, the team at Digium released four new security vulnerabilities:
- AST-2008-002: Two buffer overflows in RTP Codec Payload Handling
- AST-2008-003: Unauthenticated calls allowed from SIP channel driver
- AST-2008-004: Format String Vulnerability in Logger and Manager
- AST-2008-005: HTTP Manager ID is predictable
The solution is, predictably, to upgrade to the latest version of whichever stream of Asterisk you are using.
Technorati Tags:
asterisk, asterisk security, security, voip, sip, sip security, voip security
