CVE-2003-0779: Digium Asterisk

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.

Affected products

• Digium Asterisk: version 0.1.7 only; version 0.1.8 only; version 0.1.9 only; version 0.1.9.1 only; version 0.2 only; version 0.3 only; …

Published 2003-09-22. Last modified 2026-06-16.