<br><br><div><span class="gmail_quote">On 3/2/07, <b class="gmail_sendername">Kevin P. Fleming</b> <<a href="mailto:kpfleming@digium.com">kpfleming@digium.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
David Thomas wrote:<br>> What exactly is this bug? I get Access Denied for that number on the<br>> bug tracker.<br><br>The bug report has been marked private since it is an exploitable<br>security vulnerability. New releases of Asterisk are already on the
<br>Digium FTP servers containing a fix for this issue.</blockquote><div><br>can an exploit not be derrived from the patch in the code? Why hide this information since its clear the 'bad guys' already have it.<br>
</div><br></div><br>-- <br>Trixter <a href="http://www.0xdecafbad.com">http://www.0xdecafbad.com</a> Bret McDanel<br>Belfast +44 28 9099 6461 US +1 516 687 5200<br><a href="http://www.trxtel.com">http://www.trxtel.com
</a> the VoIP provider that pays you!