Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability

Bugtraq ID:	36926
Class:	Input Validation Error
CVE:	CVE-2008-7220
Remote:	Yes
Local:	No
Published:	Jan 22 2008 12:00AM
Updated:	Apr 16 2015 05:50PM
Credit:	Reported by the vendor
Vulnerable:	Sam Stephenson prototype javascript framework 1.6.0.2 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Asterisk Asterisk Business Edition C.3.1.0 Asterisk Asterisk Business Edition C.3.1 1 Asterisk Asterisk Business Edition C.2.4.3 Asterisk Asterisk Business Edition C.2.4.2 Asterisk Asterisk Business Edition C.2.3.3 Asterisk Asterisk Business Edition C.2.3 .2 Asterisk Asterisk Business Edition C.2.3 Asterisk Asterisk Business Edition C.2.1.2.1 Asterisk Asterisk Business Edition B.2.5.9 Asterisk Asterisk Business Edition B.2.5.8 Asterisk Asterisk Business Edition B.2.5.6 Asterisk Asterisk Business Edition B.2.5.5 Asterisk Asterisk Business Edition B.2.5.4 Asterisk Asterisk Business Edition B.2.5.3 Asterisk Asterisk Business Edition B.2.5.2 Asterisk Asterisk Business Edition B.2.5.10 Asterisk Asterisk Business Edition B.2.5.1 Asterisk Asterisk Business Edition B.2.5 Asterisk Asterisk 1.6.1 0-rc2 Asterisk Asterisk 1.6.1 0-rc1 Asterisk Asterisk 1.6.1 .6 Asterisk Asterisk 1.6.1 .5 Asterisk Asterisk 1.6.1 Asterisk Asterisk 1.6 beta6 Asterisk Asterisk 1.6 6 Asterisk Asterisk 1.4.26 Asterisk Asterisk 1.4.24 .1 Asterisk Asterisk 1.4.24 Asterisk Asterisk 1.4.9 Asterisk Asterisk 1.4.8 Asterisk Asterisk 1.4.7 Asterisk Asterisk 1.4.6 Asterisk Asterisk 1.4.5 Asterisk Asterisk 1.4.4 Asterisk Asterisk 1.4.3 Asterisk Asterisk 1.6.1.8 Asterisk Asterisk 1.6.1.7 Asterisk Asterisk 1.6.0.14 Asterisk Asterisk 1.6 Asterisk Asterisk 1.4.26.2 Asterisk Asterisk 1.4.26.1
Not Vulnerable:	Asterisk Asterisk Business Edition C.3.2 2 Asterisk Asterisk Business Edition C.2.4 5 Asterisk Asterisk Business Edition B.2.5 12 Asterisk Asterisk 1.6.1 .9 Asterisk Asterisk 1.6 .17 Asterisk Asterisk 1.4.26 .3

Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability

Prototype JavaScript Framework is prone to a vulnerability involving cross-site AJAX requests.

An attacker can exploit this issue to execute arbitrary code within the context of the affected browser. Other attacks are also possible.

Versions prior to Prototype 1.6.0.2 are vulnerable.

The following applications include Prototype:

Asterisk Open Source
Asterisk Business Edition
AsteriskNOW

Other applications may also include Prototype.

Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 ia-64

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_ia64.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_ia64.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_ia64.deb

Debian Linux 5.0 alpha

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_alpha.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_alpha.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_i386.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_i386.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_i386.deb

Debian Linux 5.0 s/390

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb

Debian Linux 5.0 mipsel

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb

Debian Linux 5.0 hppa

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_hppa.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_hppa.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_hppa.deb

Debian Linux 5.0 m68k

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb

Debian Linux 5.0 arm

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_arm.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_arm.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_arm.deb

Debian Linux 5.0 armel

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_armel.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_armel.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_armel.deb

Debian Linux 5.0

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb

Debian Linux 5.0 amd64

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_amd64.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_amd64.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_amd64.deb

Debian Linux 5.0 mips

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_mips.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_mips.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_mips.deb

Debian Linux 5.0 powerpc

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_powerpc.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_powerpc.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_powerpc.deb

Debian Linux 5.0 sparc

• Debian asterisk-config_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-confi g_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-dbg_1.4.21.2~dfsg-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dbg_1 .4.21.2~dfsg-3+lenny1_sparc.deb


• Debian asterisk-dev_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-dev_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-doc_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-doc_1 .4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk-h323_1.4.21.2~dfsg-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-h323_ 1.4.21.2~dfsg-3+lenny1_sparc.deb


• Debian asterisk-sounds-main_1.4.21.2~dfsg-3+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk-sound s-main_1.4.21.2~dfsg-3+lenny1_all.deb


• Debian asterisk_1.4.21.2~dfsg-3+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/a/asterisk/asterisk_1.4.2 1.2~dfsg-3+lenny1_sparc.deb

Prototype JavaScript Framework Cross-Site Ajax Request Vulnerability

References:

• Asterisk Project Security Advisory - AST-2009-009 (Asterisk)
  
• Prototype JavaScript Framework Changelog (Sam Stephenson)
  
• AST-2009-009: Cross-site AJAX request vulnerability ("Asterisk Security Team" )