NetSight
IP …
high7.8

CVE-2008-3264

The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x befor…

Impact

The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (traffic amplification) via an IAX2 FWDOWNL request.

Affected products

VendorProductAffected versions
AsteriskAsterisk Appliance Developer Kit
Versions 0.2, 0.3, 0.4, 0.5, 0.6, 0.6.0
AsteriskAsterisk Business Edition
Versions a, b, b.1.3.2, b.1.3.3, b.2.2.0, b.2.2.1
AsteriskAsterisknow
Versions beta_5, beta_6, beta_7, pre-release
AsteriskOpen Source
Versions 1.0, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.3.4

Weakness classification

CWE-287

References