CVE-2008-5558

Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.

Link	Resource
http://downloads.digium.com/pub/security/AST-2008-012.html
http://osvdb.org/50675
http://secunia.com/advisories/32956	Vendor Advisory
http://www.securitytracker.com/id?1021378
http://www.securityfocus.com/bid/32773
http://securityreason.com/securityalert/4769
http://secunia.com/advisories/34982
http://security.gentoo.org/glsa/glsa-200905-01.xml
http://www.vupen.com/english/advisories/2008/3403
http://www.securityfocus.com/archive/1/499117/100/0/threaded

Configuration 1

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.5:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.30.2:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.3:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.1:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.30:*:*:*:*:*:*:* cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.30.3:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.28:*:*:*:*:*:*:* cpe:2.3:a:asterisk:open_source:1.2.29:*:*:*:*:*:*:*

---

Published : 2008-12-17 05:30

Updated : 2018-10-11 08:56

---

NVD link : CVE-2008-5558

Mitre link : CVE-2008-5558

No products.

CWE-287