FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

asterisk -- Multiple vulnerabilities

Affected packages
	asterisk	<	1.8.32.1
	asterisk11	<	11.14.1

Details

VuXML ID	a92ed304-716c-11e4-b008-001999f8d30b
Discovery	2014-11-21
Entry	2014-11-21

The Asterisk project reports:

AST-2014-012 - Mixed IP address families in access control lists may permit unwanted traffic.

AST-2014-018 - AMI permission escalation through DB dialplan function.

[source]

References

CVE Name	CVE-2014-8412
CVE Name	CVE-2014-8418
URL	http://downloads.asterisk.org/pub/security/AST-2014-012.html
URL	http://downloads.asterisk.org/pub/security/AST-2014-018.html