CVE-2007-6171: Digium Asterisk

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Affected products

• Digium Asterisk: from 1.4.0, before 1.4.15 (fixed in 1.4.15); version c.1.0 only

Published 2007-11-30. Last modified 2026-06-16.