[UNIX] res_config_pgsql SQL Injection Issue

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -



res_config_pgsql SQL Injection Issue
------------------------------------------------------------------------


SUMMARY

Input buffers were not properly escaped when providing lookup data to the
Postgres Realtime Engine. An attacker could potentially compromise the
administrative database containing users' usernames and passwords used for
SIP authentication, among other things.

This module is not active by default and must be configured for use by the
administrator. Default installations of Asterisk are not affected.

DETAILS

Vulnerable Systems:
* Asterisk Open Source version 1.4.14 and previous
* Asterisk Business Edition version C.1.0-beta5 and previous

Immune Systems:
* Asterisk Open Source version 1.4.15
* Asterisk Business Edition version C.1.0-beta6

Workaround:
Convert your installation to use res_config_odbc with the PgsqlODBC
driver. This module provides similar functionality but is not vulnerable.

CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6171>
CVE-2007-6171


ADDITIONAL INFORMATION

The information has been provided by <mailto:p_christ@xxxxxx> P.
Chisteas.
The original article can be found at:
<http://downloads.digium.com/pub/security/AST-2007-025.html>
http://downloads.digium.com/pub/security/AST-2007-025.html



========================================


This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@xxxxxxxxxxxxxx
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@xxxxxxxxxxxxxx


====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

Relevant Pages

  • [UNIX] RTP Codec Payload Handling Two Buffer Overflows
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Two buffer overflows exist in the RTP payload handling code of Asterisk. ... Asterisk Open Source versions prior to 1.4.18.1 and 1.4.19-rc3 ... The second overflow is caused by sending more than 32 RTP payloads. ...
    (Securiteam)
  • [UNIX] Asterisk cdr_addon_mysql SQL Injection Vulnerability
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Asterisk cdr_addon_mysql SQL Injection Vulnerability ... Asterisk Open Source version 1.2.8 and prior ...
    (Securiteam)
  • [UNIX] Asterisk Logger and Manager Format String Vulnerability
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Asterisk Logger and Manager Format String Vulnerability ... Asterisk Open Source versions prior to 1.6.0-beta6 ...
    (Securiteam)
  • [UNIX] cdr_pgsql SQL Injection Issue
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Asterisk Open Source version 1.2.24 and previous ... Asterisk Business Edition version B.2.3.3 and previous ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [UNIX] Asterisk SIP Channel Driver Unauthenticated Calls
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Asterisk SIP Channel Driver Unauthenticated Calls ... Asterisk Open Source versions prior to 1.2.27 ... Asterisk Business Edition version A.x.x ...
    (Securiteam)