Asterisk Project Security Advisory – Asterisk installations using cryptographic keys generated by Debian-based systems may be using a vulnerable implementation of OpenSSL.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/66606/AST-2008-007.txt
Source: https://packetstormsecurity.com/files/66606/AST-2008-007.txt.html