CVE Vulnerability

CVE-2007-6171

SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

7.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://downloads.digium.com/pub/security/AST-2007-025.html Patch Vendor Advisory
http://www.securityfocus.com/bid/26645 Third Party Advisory VDB Entry
http://securitytracker.com/id?1019021 Third Party Advisory VDB Entry
http://secunia.com/advisories/27873 Third Party Advisory
http://osvdb.org/38933 Broken Link
http://www.vupen.com/english/advisories/2007/4055 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38766 Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/484387/100/0/threaded Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*
cpe:2.3:a:digium:asterisk:c.1.0:beta1:*:*:business:*:*:*
cpe:2.3:a:digium:asterisk:c.1.0:beta2:*:*:business:*:*:*
cpe:2.3:a:digium:asterisk:c.1.0:beta3:*:*:business:*:*:*
cpe:2.3:a:digium:asterisk:c.1.0:beta4:*:*:business:*:*:*
cpe:2.3:a:digium:asterisk:c.1.0:beta5:*:*:business:*:*:*
Information

Published : 2007-11-30 01:46

Updated : 2018-10-26 02:18

NVD link : CVE-2007-6171

Mitre link : CVE-2007-6171

Products Affected
No products.
CWE
CWE-89