Test ID:	1.3.6.1.4.1.25623.1.0.57693
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1229-1)
Summary:	The remote host is missing an update for the Debian 'asterisk' package(s) announced via the DSA-1229-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'asterisk' package(s) announced via the DSA-1229-1 advisory. Vulnerability Insight: Adam Boileau discovered an integer overflow in the Skinny channel driver in Asterisk, an Open Source Private Branch Exchange or telephone system, as used by Cisco SCCP phones, which allows remote attackers to execute arbitrary code. For the stable distribution (sarge) this problem has been fixed in version 1.0.7.dfsg.1-2sarge4. For the unstable distribution (sid) this problem has been fixed in version 1.2.13~ dfsg-1. We recommend that you upgrade your asterisk packages. Affected Software/OS: 'asterisk' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5444 BugTraq ID: 20617 http://www.securityfocus.com/bid/20617 Bugtraq: 20061018 Security-Assessment.com Advisory: Asterisk remote heap overflow (Google Search) http://www.securityfocus.com/archive/1/449127/100/0/threaded CERT/CC vulnerability note: VU#521252 http://www.kb.cert.org/vuls/id/521252 Debian Security Information: DSA-1229 (Google Search) http://www.us.debian.org/security/2006/dsa-1229 http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050171.html http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml http://www.securityfocus.com/archive/1/449183/100/0/threaded http://www.osvdb.org/29972 http://securitytracker.com/id?1017089 http://secunia.com/advisories/22480 http://secunia.com/advisories/22651 http://secunia.com/advisories/22979 http://secunia.com/advisories/23212 SuSE Security Announcement: SUSE-SA:2006:069 (Google Search) http://www.novell.com/linux/security/advisories/2006_69_asterisk.html http://www.vupen.com/english/advisories/2006/4097 XForce ISS Database: asterisk-getinput-code-execution(29663) https://exchange.xforce.ibmcloud.com/vulnerabilities/29663
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.