CVE:CVE-2006-2020
CNNVD:CNNVD-200604-454
Asterisk@Home 2.8之前的版本中的Asterisk录音接口以不足的访问控制权限将recordings/includes/main.conf存储在web文件根目录下。这使得远程攻击者可以获取密码信息。
solution:Upgrade asteriskathome asteriskathome to a higher version than 2.6,and avoid the version (,2.6]