CVE-2008-5558

Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service crash via authentication attempts involving 1 an unknown user or 2 a user using hostname matching...

Asterisk voice server DoS

Crash on IAX2 processing...

AST-2008-012: Remote crash vulnerability in IAX2

Asterisk Project Security Advisory - AST-2008-012 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Remote crash vulnerability in IAX2 |...

iax2-version NSE Script

Detects the UDP IAX2 service. The script sends an Inter-Asterisk eXchange IAX Revision 2 Control Frame POKE request and checks for a proper response. This protocol is used to enable VoIP connections between servers as well as client-server communication. Example Usage nmap -sU -sV -p 4569 Script...

Asterisk DoS

Resources exhaustion on IAX request parsing...

Additional Unresolved Asterisk IAX 0day..

Hello Again, There is an additional Asterisk IAX Resource Exhaustion DoS 0day. http://www.voip0day.com/news/asterisk-nsfw/ http://securityscraper.com/ Be advised, Asterisk is not safe for work. Kind Regards, Blake Cornell...

Asterisk multiple DoS conditions

Application crashes on malformed IAX requests flood...

Additional Asterisk Resource Exhaustion DoS Vulnerabilities

Hello, There are additional Asterisk RE Vulnerabilities. They are much like the IAX POKE vulnerability except these make Asterisk segfault signal 11 when call numbers are exhausted. http://www.securityscraper.com/pingpoke/iaxControlNewAuthmethods.txt...

Gentoo Security Advisory GLSA 200606-15 (asterisk)

The remote host is missing updates announced in advisory GLSA 200606-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200703-14 (asterisk)

The remote host is missing updates announced in advisory GLSA 200703-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200610-15 (asterisk)

The remote host is missing updates announced in advisory GLSA 200610-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200610-15 (asterisk)

The remote host is missing updates announced in advisory GLSA 200610-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200802-11 (asterisk)

The remote host is missing updates announced in advisory GLSA 200802-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200704-01 (asterisk)

The remote host is missing updates announced in advisory GLSA 200704-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200804-13 (asterisk)

The remote host is missing updates announced in advisory GLSA 200804-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-15 (asterisk)

The remote host is missing updates announced in advisory GLSA 200606-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200802-11 (asterisk)

The remote host is missing updates announced in advisory GLSA 200802-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200703-14 (asterisk)

The remote host is missing updates announced in advisory GLSA 200703-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200804-13 (asterisk)

The remote host is missing updates announced in advisory GLSA 200804-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3903

Asterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and 1.6.0.x before 1.6.0.8; Asterisk Business Edition A.x.x, B.x.x before B.2.5.8, C.1.x.x before C.1.10.5, and C.2.x.x before C.2.3.3; s800i 1.3.x before 1.3.0.2; and Trixbox PBX 2.6.1, when Digest authentication and authalwaysreje...