[asterisk-users] Anyone know which vulnerability specifically they are referring to?

[Jerry Jones]

http://www.networkworld.com/news/2008/120608-fbi-criminals-auto-dialing-with-hacked.html?Inform=nl&netht=rn_120808&nladname=120808dailynewsamal

Criminals are taking advantage of a bug in the Asterisk Internet  
telephony system that lets them pump out thousands of scam phone calls  
in an hour, the U.S. Federal Bureau of Investigation warned Friday.

The FBI didn't say which versions of Asterisk were vulnerable to the  
bug, but it advised users to upgrade to the latest version of the  
software. Asterisk is an open-source product that lets users turn a  
Linux computer into a VoIP telephone exchange.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20081208/37453c88/attachment.htm