FYI…

- http://isc.sans.org/diary.html?storyid=4180
Last Updated: 2008-03-21 18:23:17 UTC - "The Astrerisk.org team has released new versions of code…
[see the ISC URL above for details]
Exploitation of these types of vulnerabilities has been used in the past to gain access to asterisk servers to set up automated systems for vishing attacks.
Vishing is a term used for voice based phishing. http://en.wikipedia.org/wiki/Vishing
If you get a message, email or phone call that asks you to call a number you do not recognize check the bill for that service or the back of your credit card and call THAT number not the number that was included in the message. Never give out personal information unless you have verified the data receiver."

:ph34r: