Debian/asterisk: unknown
Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to (1) execute code via format string specifiers or (2) ove
Action: Upgrade asterisk to 1:1.2.11.dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:1.2.11.dfsg-1 | - |
Fixed versions
| 1:1.2.11.dfsg-1 |
Sources
published · modified · JSON