CVE-2007-6170

N/A Unknown
Published: November 30, 2007 Modified: April 23, 2026
View on NVD

Description

SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via (1) ANI and (2) DNIS arguments.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://downloads.digium.com/pub/security/AST-2007-026.html
Source: cve@mitre.org
Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
Source: cve@mitre.org
Third Party Advisory
http://secunia.com/advisories/27827
Source: cve@mitre.org
Third Party Advisory
http://secunia.com/advisories/27892
Source: cve@mitre.org
Third Party Advisory
http://secunia.com/advisories/29242
Source: cve@mitre.org
Third Party Advisory
http://secunia.com/advisories/29782
Source: cve@mitre.org
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200804-13.xml
Source: cve@mitre.org
Third Party Advisory
http://securitytracker.com/id?1019020
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://www.debian.org/security/2007/dsa-1417
Source: cve@mitre.org
Third Party Advisory
http://www.securityfocus.com/archive/1/484388/100/0/threaded
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/26647
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/4056
Source: cve@mitre.org
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38765
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://downloads.digium.com/pub/security/AST-2007-026.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/27827
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/27892
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/29242
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/29782
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200804-13.xml
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://securitytracker.com/id?1019020
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.debian.org/security/2007/dsa-1417
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.securityfocus.com/archive/1/484388/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/26647
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/4056
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38765
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry

26 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.8%
85th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-89

Affected Vendors

debian digium

Related CVEs

CVE-2026-56414 7.2
CVE-2026-55975 7.2
CVE-2026-33560 7.1
CVE-2026-31928 8.1
CVE-2026-28701 9.8