Oval Definition:oval:org.opensuse.security:def:20076170
Revision Date:2015-11-16Version:1
Title:CVE-2007-6170
Description:
SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via (1) ANI and (2) DNIS arguments.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2007-6170
Platform(s):openSUSE 10.2
SUSE LINUX 10.1
Product(s):
Definition Synopsis
  • suse101 is installed
  • AND Package Information
  • asterisk-alsa less than 1.2.5-12.18
  • OR asterisk-odbc less than 1.2.5-12.18
  • OR asterisk-pgsql less than 1.2.5-12.18
  • OR asterisk-spandsp less than 1.2.5-12.18
  • OR asterisk-zaptel less than 1.2.5-12.18
  • OR asterisk less than 1.2.5-12.18
    • BACK