OpenPKG Security Advisory – OpenPKG-SA-2006.024: According to a vendor security advisory [1], a vulnerability exists in the Asterisk Private Branch Exchange (PBX) software [2]. This vulnerability would enable an attacker to remotely execute code as the user Asterisk is running under. It is not required that the “skinny.conf” file contains any valid phone entries, only that the “chan_skinny” module is loaded and operational (but which is not the default in OpenPKG’s default Asterisk configuration).
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/51264/OpenPKG-SA-2006.024.txt
Source: https://packetstormsecurity.com/files/51264/OpenPKG-Security-Advisory-2006.24.html