CVE-2003-0779

Published: Sep 22, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.

Affected (7)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 0.1.7
Digium Asterisk	Version 0.1.8
Digium Asterisk	Version 0.1.9.1
Digium Asterisk	Version 0.1.9
Digium Asterisk	Version 0.2
Digium Asterisk	Version 0.3
Digium Asterisk	Version 0.4

References (2)

http://www.atstake.com/research/advisories/2003/a091103-1.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.atstake.com/research/advisories/2003/a091103-1.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.