Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header.

Published

2008-03-20T00:44:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

9.2

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application asterisk asterisk a Yes
Application asterisk asterisk b.1.3.2 Yes
Application asterisk asterisk b.1.3.3 Yes
Application asterisk asterisk b.2.2.0 Yes
Application asterisk asterisk b.2.2.1 Yes
Application asterisk asterisk b.2.3.1 Yes
Application asterisk asterisk b.2.3.2 Yes
Application asterisk asterisk b.2.3.3 Yes
Application asterisk asterisk b.2.3.4 Yes
Application asterisk asterisk b.2.3.5 Yes
Application asterisk asterisk b.2.3.6 Yes
Application asterisk asterisk c.1.0_beta7 Yes
Application asterisk asterisk c.1.0_beta8 Yes
Application asterisk asterisk c.1.6 Yes
Application asterisk asterisk c.1.6.1 Yes
Application asterisk asterisk_appliance_developer_kit ≤ 1.4 Yes
Application asterisk asterisk_appliance_developer_kit 0.2 Yes
Application asterisk asterisk_appliance_developer_kit 0.3 Yes
Application asterisk asterisk_appliance_developer_kit 0.4 Yes
Application asterisk asterisk_appliance_developer_kit 0.5 Yes
Application asterisk asterisk_appliance_developer_kit 0.6 Yes
Application asterisk asterisk_appliance_developer_kit 0.6.0 Yes
Application asterisk asterisk_appliance_developer_kit 0.7 Yes
Application asterisk asterisk_appliance_developer_kit 0.8 Yes
Application asterisk asterisk_appliance_developer_kit 1.3 Yes
Application asterisk asterisk_business_edition ≤ a Yes
Application asterisk asterisk_business_edition ≤ b.2.5.0 Yes
Application asterisk asterisk_business_edition ≤ c.1.6.1 Yes
Application asterisk asterisknow ≤ 1.0.1 Yes
Application asterisk asterisknow 1.0 Yes
Application asterisk open_source ≤ 1.2.26 Yes
Application asterisk open_source ≤ 1.4.17 Yes
Application asterisk open_source ≤ 1.4.19 Yes
Application asterisk open_source 1.0 Yes
Application asterisk open_source 1.0.0 Yes
Application asterisk open_source 1.0.1 Yes
Application asterisk open_source 1.0.2 Yes
Application asterisk open_source 1.0.3 Yes
Application asterisk open_source 1.0.3.4 Yes
Application asterisk open_source 1.0.4 Yes
Application asterisk open_source 1.0.5 Yes
Application asterisk open_source 1.0.6 Yes
Application asterisk open_source 1.0.7 Yes
Application asterisk open_source 1.0.8 Yes
Application asterisk open_source 1.0.9 Yes
Application asterisk open_source 1.0.11 Yes
Application asterisk open_source 1.0.11.1 Yes
Application asterisk open_source 1.0.12 Yes
Application asterisk open_source 1.2.0 Yes
Application asterisk open_source 1.2.0 Yes
Application asterisk open_source 1.2.0 Yes
Application asterisk open_source 1.2.0 Yes
Application asterisk open_source 1.2.0beta2 Yes
Application asterisk open_source 1.2.1 Yes
Application asterisk open_source 1.2.2 Yes
Application asterisk open_source 1.2.3 Yes
Application asterisk open_source 1.2.4 Yes
Application asterisk open_source 1.2.5 Yes
Application asterisk open_source 1.2.6 Yes
Application asterisk open_source 1.2.7 Yes
Application asterisk open_source 1.2.7.1 Yes
Application asterisk open_source 1.2.8 Yes
Application asterisk open_source 1.2.9 Yes
Application asterisk open_source 1.2.9.1 Yes
Application asterisk open_source 1.2.10 Yes
Application asterisk open_source 1.2.11 Yes
Application asterisk open_source 1.2.12 Yes
Application asterisk open_source 1.2.12.1 Yes
Application asterisk open_source 1.2.13 Yes
Application asterisk open_source 1.2.14 Yes
Application asterisk open_source 1.2.15 Yes
Application asterisk open_source 1.2.16 Yes
Application asterisk open_source 1.2.17 Yes
Application asterisk open_source 1.2.18 Yes
Application asterisk open_source 1.2.19 Yes
Application asterisk open_source 1.2.20 Yes
Application asterisk open_source 1.2.21 Yes
Application asterisk open_source 1.2.21.1 Yes
Application asterisk open_source 1.2.22 Yes
Application asterisk open_source 1.2.23 Yes
Application asterisk open_source 1.2.24 Yes
Application asterisk open_source 1.2.25 Yes
Application asterisk open_source 1.2.26.1 Yes
Application asterisk open_source 1.2.26.2 Yes
Application asterisk open_source 1.4.0 Yes
Application asterisk open_source 1.4.0 Yes
Application asterisk open_source 1.4.0 Yes
Application asterisk open_source 1.4.0 Yes
Application asterisk open_source 1.4.1 Yes
Application asterisk open_source 1.4.10 Yes
Application asterisk open_source 1.4.10.1 Yes
Application asterisk open_source 1.4.11 Yes
Application asterisk open_source 1.4.12 Yes
Application asterisk open_source 1.4.12.1 Yes
Application asterisk open_source 1.4.13 Yes
Application asterisk open_source 1.4.14 Yes
Application asterisk open_source 1.4.15 Yes
Application asterisk open_source 1.4.16 Yes
Application asterisk open_source 1.4.16.1 Yes
Application asterisk open_source 1.4.16.2 Yes
Application asterisk open_source 1.4.18 Yes
Application asterisk open_source 1.4.19 Yes
Application asterisk s800i ≤ 1.1.0.1 Yes
Application asterisk s800i 1.0 Yes
Application asterisk s800i 1.0.1 Yes
Application asterisk s800i 1.0.2 Yes
Application asterisk s800i 1.0.3 Yes
Application asterisk s800i 1.0.3.3 Yes
Application asterisk s800i 1.1.0 Yes
References