• info
• discussion
• exploit
• solution
• references

Asterisk res_config_pgsql SQL Injection Vulnerability

Solution:
The vendor has released Asterisk 1.4.15 to address this issue. Please see the references for more information.


Asterisk Asterisk 1.4.1

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.10

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.11

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.12

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.13

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.14

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.2

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.3

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.4

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.5

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.6

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.7

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.8

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz

Asterisk Asterisk 1.4.9

• Asterisk asterisk-1.4.15.tar.gz
  http://www.digium.com/elqNow/elqRedir.htm?ref=http://downloads.digium. com/pub/asterisk/releases/asterisk-1.4.15.tar.gz