• info
• discussion
• exploit
• solution
• references

Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 ia-64

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_ia64.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_ia64.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_ia64.deb

Debian Linux 5.0 alpha

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_alpha.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_alpha.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_i386.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_i386.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_i386.deb

Debian Linux 5.0 s/390

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb

Debian Linux 5.0 mipsel

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb

Debian Linux 5.0 hppa

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_hppa.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_hppa.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_hppa.deb

Debian Linux 5.0 m68k

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb

Debian Linux 5.0 arm

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_arm.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_arm.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_arm.deb

Debian Linux 5.0 armel

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_armel.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_armel.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_armel.deb

Debian Linux 5.0

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb

Debian Linux 5.0 amd64

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_amd64.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_amd64.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_amd64.deb

Debian Linux 5.0 mips

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_mips.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_mips.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_mips.deb

Debian Linux 5.0 powerpc

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_powerpc.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_powerpc.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_powerpc.deb

Debian Linux 5.0 sparc

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_sparc.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_sparc.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_sparc.deb