diff options
| author | Ryan Steinmetz <zi@FreeBSD.org> | 2011-12-09 01:52:42 +0000 |
|---|---|---|
| committer | Ryan Steinmetz <zi@FreeBSD.org> | 2011-12-09 01:52:42 +0000 |
| commit | 8107e23200234cef53a2eb7ebfd7d959cc167f15 (patch) | |
| tree | 9c0810113ed6a9abe1254f2d1935a96fbd8fa85c /security/vuxml/vuln.xml | |
| parent | e790fc308f0d29c99498f1b8913dde536a368952 (diff) | |
Notes
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 91d7afe9fdeb..3b5f90d2e0fb 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -47,6 +47,43 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="bb389137-21fb-11e1-89b4-001ec9578670"> + <topic>asterisk -- Multiple Vulnerabilities</topic> + <affects> + <package> + <name>asterisk</name> + <range><lt>1.8.7.2</lt></range> + </package> + <package> + <name>asterisk16</name> + <range><lt>1.6.2.21</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Asterisk project reports:</p> + <blockquote cite="http://downloads.asterisk.org/pub/security/AST-2011-013.html"> + <p>It is possible to enumerate SIP usernames when the general and user/peer + NAT settings differ in whether to respond to the port a request is sent + from or the port listed for responses in the Via header</p> + </blockquote> + <blockquote cite="http://downloads.asterisk.org/pub/security/AST-2011-014.html"> + <p>When the "automon" feature is enabled in features.conf, it is possible to + send a sequence of SIP requests that cause Asterisk to dereference a NULL + pointer and crash.</p> + </blockquote> + </body> + </description> + <references> + <url>http://downloads.asterisk.org/pub/security/AST-2011-013.html</url> + <url>http://downloads.asterisk.org/pub/security/AST-2011-014.html</url> + </references> + <dates> + <discovery>2011-12-08</discovery> + <entry>2011-12-09</entry> + </dates> + </vuln> + <vuln vid="93be487e-211f-11e1-89b4-001ec9578670"> <topic>isc-dhcp-server -- Remote DoS</topic> <affects> |