Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam™ in Your Inbox   E-mail this CVE-2008-1333 to a friend New vulnerability? New tool? Tell us	CVE-2008-1333 Asterisk Logger and Manager Format String Vulnerability     Credit: The information has been provided by Joshua Colp. The original article can be found at: http://downloads.digium.com/pub/security/AST-2008-004.html    CVE-2008-1333 Details Check for CVE-2008-1333 Scan your system for new vulnerabilities. Signup now and get the first month free! beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * Asterisk Open Source versions prior to 1.6.0-beta6 Immune Systems:  * Asterisk Open Source version 1.6.0-beta6 Resolution: Input given to both the ast_verbose logging API call and astman_append function is now interpreted as a character string and not as a format string. Bugs: The following two bug reports provide more information about this vulnerability: http://bugs.digium.com/view.php?id=12205 http://bugs.digium.com/view.php?id=12206 CVE Information: CVE-2008-1333  Comments on CVE-2008-1333:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Copyright © 1998-2008 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®