Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Asterisk Predictable HTTP Manager Session ID Security Bypass Vulnerability

Asterisk is prone to a vulnerability that can allow an attacker to predict the 'manager' session ID in the AsteriskGUI HTTP server.

Attackers can exploit this issue to hijack 'manager' HTTP sessions, which can lead to further attacks.







 

Privacy Statement
Copyright 2008, SecurityFocus