Unrated severityNVD Advisory· Published Nov 30, 2007· Updated Jun 16, 2026
CVE-2007-6170
CVE-2007-6170
Description
SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via (1) ANI and (2) DNIS arguments.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*range: >=1.2.0,<1.2.25
- cpe:2.3:a:digium:asterisk:*:*:*:*:business:*:*:*range: >=b.2.3.0,<b.2.3.4
- cpe:2.3:a:digium:asterisk:c.1.0:beta1:*:*:business:*:*:*
- cpe:2.3:a:digium:asterisk:c.1.0:beta2:*:*:business:*:*:*
- cpe:2.3:a:digium:asterisk:c.1.0:beta3:*:*:business:*:*:*
- cpe:2.3:a:digium:asterisk:c.1.0:beta4:*:*:business:*:*:*
- cpe:2.3:a:digium:asterisk:c.1.0:beta5:*:*:business:*:*:*
- (no CPE)range: <1.4.15, <1.2.25, <B.2.3.4, <C.1.0-beta6
Patches
Vulnerability mechanics
References
13- downloads.digium.com/pub/security/AST-2007-026.htmlnvdPatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.htmlnvdThird Party Advisory
- secunia.com/advisories/27827nvdThird Party Advisory
- secunia.com/advisories/27892nvdThird Party Advisory
- secunia.com/advisories/29242nvdThird Party Advisory
- secunia.com/advisories/29782nvdThird Party Advisory
- security.gentoo.org/glsa/glsa-200804-13.xmlnvdThird Party Advisory
- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.debian.org/security/2007/dsa-1417nvdThird Party Advisory
- www.securityfocus.com/archive/1/484388/100/0/threadednvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/26647nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2007/4056nvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/38765nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.