NetSight
IP …
high8.8

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and …

Impact

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header.

Affected products

VendorProductAffected versions
AsteriskAsterisk
Versions a, b.1.3.2, b.1.3.3, b.2.2.0, b.2.2.1, b.2.3.1
AsteriskAsterisk Appliance Developer Kit
through 1.4
Versions 0.2, 0.3, 0.4, 0.5, 0.6
AsteriskAsterisk Business Edition
through a
through b.2.5.0
through c.1.6.1
AsteriskAsterisknow
through 1.0.1
Version 1.0
AsteriskOpen Source
through 1.2.26
through 1.4.17
through 1.4.19
Versions 1.0, 1.0.0, 1.0.1
AsteriskS800i
through 1.1.0.1
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.3.3

Weakness classification

CWE-264

References