CVE-2015-3008

🗓️ 10 Apr 2015 14:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 30 Views

Asterisk Open Source versions before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified Asterisk versions 1.8.28 before 1.8.28-cert5, 11.6 before 11.6-cert11, and 13.1 before 13.1-cert2 are vulnerable to a man-in-the-middle attack via crafted SSL certificates

Reporter	Title	Published	Views	Family All 33
FreeBSD	asterisk -- TLS Certificate Common name NULL byte exploit	4 Apr 201500:00	–	freebsd
Tenable Nessus	Asterisk TLS Certificate Common Name NULL Byte Vulnerability (AST-2015-003)	20 Apr 201500:00	–	nessus
Tenable Nessus	Debian DLA-455-1 : asterisk security update	4 May 201600:00	–	nessus
Tenable Nessus	Debian DSA-3700-1 : asterisk - security update	26 Oct 201600:00	–	nessus
Tenable Nessus	Fedora 22 : asterisk-13.3.2-1.fc22 (2015-5948)	22 Jul 201500:00	–	nessus
Tenable Nessus	FreeBSD : asterisk -- TLS Certificate Common name NULL byte exploit (5fee3f02-de37-11e4-b7c3-001999f8d30b)	9 Apr 201500:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : asterisk (MDVSA-2015:206)	28 Apr 201500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2015-3008	20 Aug 202500:00	–	nessus
CNVD	Asterisk Open Source/Certified Asterisk Certificate Validation Vulnerability	13 Apr 201500:00	–	cnvd
Check Point Advisories	Multiple Vendors TLS Certificate Common Name NULL Byte Input Validation Error (CVE-2015-3008; CVE-2015-3455)	21 May 201500:00	–	checkpoint_advisories