|
Asterisk 1.2.13 released - Security Vulnerability Fix |
|
Thursday, 19 October 2006 |
The Asterisk Development team has released an update to Asterisk 1.2, Asterisk 1.2.13.
This release contains a fix for a security vulnerability recently found in the chan_skinny channel driver (for Cisco SCCP phones). This vulnerability would enable an attacker to remotely execute code as the system user running Asterisk (frequently 'root'). The exploit does not require that the skinny.conf contain any valid phone entries, only that chan_skinny is loaded and operational.
This release also contains a number of bug fixes, and some improvements to the chan_sip channel driver (for SIP devices) to mitigate the impacts of a certain class of denial-of-service attacks that have recently been published.
Read more... |
Design, Implementation and Support of communication technologies of all types, from PSTN, ISDN and ADSL through to Frame relay and VPN tunnels.