Test ID:	1.3.6.1.4.1.25623.1.0.64967
Category:	Fedora Local Security Checks
Title:	Fedora Core 10 FEDORA-2009-9374 (asterisk)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to asterisk announced via advisory FEDORA-2009-9374. Update Information: Update to 1.6.0.15 to fix many bugs... ChangeLog: * Thu Sep 3 2009 Jeffrey C. Ollie - 1.6.0.15-1 - Drop chan_mobile, too difficult to maintain as a patch - Update to 1.6.0.15 and drop unneeded patches References: [ 1 ] Bug #516990 - CVE-2009-2726 asterisk: Remote Crash Vulnerability in SIP channel driver (AST-2009-005) https://bugzilla.redhat.com/show_bug.cgi?id=516990 [ 2 ] Bug #489725 - CVE-2009-0871 asterisk: remote crash in SIP channel driver https://bugzilla.redhat.com/show_bug.cgi?id=489725 [ 3 ] Bug #521164 - CVE-2009-2346 asterisk: IAX2 DoS vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=521164 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update asterisk' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-9374 CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0041 BugTraq ID: 33174 http://www.securityfocus.com/bid/33174 Bugtraq: 20090108 AST-2009-001: Information leak in IAX2 authentication (Google Search) http://www.securityfocus.com/archive/1/499884/100/0/threaded Debian Security Information: DSA-1952 (Google Search) http://www.debian.org/security/2009/dsa-1952 http://security.gentoo.org/glsa/glsa-200905-01.xml http://www.securitytracker.com/id?1021549 http://secunia.com/advisories/33453 http://secunia.com/advisories/34982 http://secunia.com/advisories/37677 http://securityreason.com/securityalert/4910 http://www.vupen.com/english/advisories/2009/0063 Common Vulnerability Exposure (CVE) ID: CVE-2009-2726 BugTraq ID: 36015 http://www.securityfocus.com/bid/36015 Bugtraq: 20090811 AST-2009-005: Remote Crash Vulnerability in SIP channel driver (Google Search) http://www.securityfocus.com/archive/1/505669/100/0/threaded http://labs.mudynamics.com/advisories/MU-200908-01.txt http://www.securitytracker.com/id?1022705 http://secunia.com/advisories/36227 http://www.vupen.com/english/advisories/2009/2229 Common Vulnerability Exposure (CVE) ID: CVE-2009-0871 BugTraq ID: 34070 http://www.securityfocus.com/bid/34070 Bugtraq: 20090310 AST-2009-002: Remote Crash Vulnerability in SIP channel driver (Google Search) http://www.securityfocus.com/archive/1/501656/100/0/threaded http://osvdb.org/52568 http://www.securitytracker.com/id?1021834 http://secunia.com/advisories/34229 http://www.vupen.com/english/advisories/2009/0667 Common Vulnerability Exposure (CVE) ID: CVE-2009-2346 BugTraq ID: 36275 http://www.securityfocus.com/bid/36275 Bugtraq: 20090903 AST-2009-006: IAX2 Call Number Resource Exhaustion (Google Search) http://www.securityfocus.com/archive/1/506257/100/0/threaded http://securitytracker.com/id?1022819 http://secunia.com/advisories/36593
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.