I am running a version of Asterisk that has “CVS-HEAD-08/20/04-09:48:58” in the .version file. I am using Black Duck to identify the code I am using, but there is no Asterisk version “CVS-HEAD-08/20/04-09:48:58” in the Black Duck knowledgebase. “CVS-HEAD-08/20/04-09:48:58” does not appear to be a true Asterisk version. Is there an equivalent Asterisk version that might be in the Black Duck knowledgebase to which I can match this Asterisk code?
That will be a work in progress development version, from August 2004. That puts it before Asterisk 1.2.0, which is the first version listed in the table of versions. Actually, I’ve been using it since Asterisk 1.4, and it was on SVN, not CVS at that point, which means that if it was built from an official depository, it is definitely extremely old.
According to Asterisk Open Source PBX 1.0 Release - Slashdot Asterisk 1.0.0 was formally released on September 23rd 2004, so your version is probably close to a release candidate for that, but built from a snapshot of the development branch, not a formal release candidate.
As Black Duck seems to be about vulnerabilities, I’m not sure it will be that useful for an informal build, like this appears to be.