Gentoo Security Advisory GLSA 200905-01 (asterisk)

The remote host is missing updates announced in advisory GLSA 200905-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200905-01 (asterisk)

The remote host is missing updates announced in advisory GLSA 200905-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200905-01 : Asterisk: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200905-01 Asterisk: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the IAX2 channel driver when performing the 3-way handshake CVE-2008-1897, when handling a large number of POKE requests CVE-2008-3263,...

Asterisk: Multiple vulnerabilities

Background Asterisk is an open source telephony engine and toolkit. Description Multiple vulnerabilities have been discovered in the IAX2 channel driver when performing the 3-way handshake CVE-2008-1897, when handling a large number of POKE requests CVE-2008-3263, when handling authentication...

Fedora 10 : asterisk-1.6.0.5-2.fc10 (2009-0984)

Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041: http://downloads.digium.com/pub/security/AST-2009-001.html Original patch in 1.6.0.3 introduced a regression. Note that Tenable Network Security has extracted the preceding description...

AST-2009-003: SIP responses expose valid usernames

Asterisk Project Security Advisory - AST-2009-003 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | SIP responses expose valid usernames |...

Asterisk VoIP server user accounts enumeration

Different replies for non-exstant SIP account and invalid password...

Asterisk认证SIP响应用户名枚举漏洞

BUGTRAQ ID: 34353 CVECAN ID: CVE-2008-3903 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 如果启用了Digest认证的话，Asterisk PBX对登录期间所尝试的有效和无效SIP用户名会返回不同的响应，远程攻击者可以通过暴力猜测枚举出有效的用户名。 Asterisk Asterisk 1.6.0.x Asterisk Asterisk 1.4.x Asterisk Asterisk 1.2.x Asterisk Business Edition C.2.x.x Asterisk Business Edition...

Asterisk Pedantic模式SIP信道驱动INVITE头拒绝服务漏洞

BUGTRAQ ID: 34070 CVECAN ID: CVE-2009-0871 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 如果配置pedantic=yes的话，SIP信道驱动会对SIP回溯所接收到的INVITE执行额外的请求URI检查，检查中会对所发送的出站SIP INVITE头与接收到的SIP INVITE头做比较，检查代码假设所有情况下的每个头都不会为空，而实际上如果没有头的话，传送的值会为空，这可能在 sipuriparamscmp和sipuriheaderscmp函数中触发空指针引用。远程攻击者可以通过发送畸形的...

CVE-2009-0871

The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...

CVE-2009-0871

The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...

Null pointer dereference

The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...

CVE-2009-0871

The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...

CVE-2009-0871

The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...

CVE-2009-0871

CVE-2009-0871 affects the SIP channel driver in Asterisk Open Source and Asterisk Business Edition C.2.3 when the pedantic option is enabled. Remote authenticated users can crash the system by sending a SIP INVITE without headers, triggering a NULL pointer dereference in sip_uri_headers_cmp and s...

AST-2009-002: Remote Crash Vulnerability in SIP channel driver

Asterisk Project Security Advisory - AST-2009-002 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...

Asterisk VoIP server DoS

NULL pointer dereference on empty SIP INVITE header...

Fedora Update for asterisk FEDORA-2008-6676

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2008-6676 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for asterisk FEDORA-2008-3390

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2008-3390 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for asterisk FEDORA-2008-6853

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2008-6853 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...