NetSight
IP …
medium4.3

CVE-2008-5558

Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cau…

Impact

Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.

Affected products

VendorProductAffected versions
AsteriskAsterisk Business Edition
Versions b.2.3.4, b.2.3.5, b.2.5.0, b.2.5.1, b.2.5.3
AsteriskOpen Source
Versions 1.2.26, 1.2.26.1, 1.2.26.2, 1.2.27, 1.2.28, 1.2.29

Weakness classification

CWE-287

References