Re: CVE request for Asterisk flaws

[Josh Bressers <bressers () redhat com>]

I found some html copies of those (I don't like pdfs for such purposes).

----- Original Message -----
> Two flaws were fixed in Asterisk:
>
> AST-2011-003:
> http://downloads.asterisk.org/pub/security/AST-2011-003.pdf
> - resource exhaustion DoS in Asterisk Manager Interface

http://downloads.asterisk.org/pub/security/AST-2011-003.html

Use CVE-2011-1174

> AST-2011-004:
> http://downloads.asterisk.org/pub/security/AST-2011-003.pdf
> - DoS in TCP/TLS server due to NULL ptr deref

http://downloads.asterisk.org/pub/security/AST-2011-004.html

Use CVE-2011-1175

Thanks.

-- 
    JB