tocsin

Debian/asterisk: unknown

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to (1) execute code via format string specifiers or (2) ove

Action: Upgrade asterisk to 1:1.2.11.dfsg-1 or later.

Affected

introducedfixedlast affected
01:1.2.11.dfsg-1-

Fixed versions

1:1.2.11.dfsg-1

Sources

published · modified · JSON