S-240: Asterisk


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-240: Asterisk
# 1  
Old 03-27-2008
S-240: Asterisk

Several remote vulnerabilities have been discovered in Asterisk, a free software PBX and telephony toolkit. The risk is LOW. Insufficient validation of From: headers inside the SIP channel driver may lead to authentication bypass and the potential external initiation of calls.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
FXSTEST(8)						System Manager's Manuals: Asterisk						FXSTEST(8)

NAME
fxstest - Simple tests for DAHDI FXS adapters SYNOPSIS
fxstest /dev/dahdi/N comand DESCRIPTION
fxstest can be used to issue one of a number simple tests to FXS adapters (analog adapters intended to connect phones). OPTIONS
All of those tests operate on a single dahdi channel which has to be an FXS port, and must not be in use by Asterisk or any other program. The command has two mandatory parameters. The first parameter is the device file to operate on. It is typically /dev/dahdi/NN , a device file under /dev/dahdi . The second parameter is the name of the command to run on that channel: stats Reports voltages regdump Dumps ProSLIC registers tones Plays a series of tones polarity Requests channel to reverse polarity. ring Rings phone SEE ALSO
dahdi_tool(8), dahdi_cfg(8), dahdi_monitor(8), asterisk(8). BUGS
Does not allow testing channels beyond 249. Should support opening channels through /dev/dahdi/channel . AUTHOR
This manual page was written by Tzafrir Cohen <tzafrir.cohen@xorcom.com> . Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 any later version published by the Free Software Foundation. asterisk 9 June 2007 FXSTEST(8)