The remote Fedora host is missing a security update.
Update to 188.8.131.52, which fixes 2 security vulnerabilities. The Asterisk Development Team has announced security releases for Asterisk 1.4, 1.6.2 and 1.8. The available security releases are released as versions 1.4.43, 184.108.40.206 and 220.127.116.11. These releases are available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/releases The release of Asterisk versions 1.4.43, 18.104.22.168, and 22.214.171.124 resolves an issue with possible remote enumeration of SIP endpoints with differing NAT settings. The release of Asterisk versions 126.96.36.199 and 188.8.131.52 resolves a remote crash possibility with SIP when the 'automon' feature is enabled. The issues and resolutions are described in the AST-2011-013 and AST-2011-014 security advisories. For more information about the details of these vulnerabilities, please read the security advisories AST-2011-013 and AST-2011-014, which were released at the same time as this announcement. For a full list of changes in the current releases, please see the ChangeLogs : http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo g-1.4.43 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo g-184.108.40.206 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo g-220.127.116.11 Security advisory AST-2011-013 is available at : - http://downloads.asterisk.org/pub/security/AST-2011-013. pdf Security advisory AST-2011-014 is available at : - http://downloads.asterisk.org/pub/security/AST-2011-014. pdf Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.