CVE

Id
30212  
CVE No.
CVE-2008-0095  
Status
Candidate  
Description
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference.  
Phase
Assigned (20080107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
320535 30212 CVE-2008-0095 BUGTRAQ:20080102 AST-2008-001: Crash from transfer using BYE with Also header  View
320536 30212 CVE-2008-0095 URL:http://www.securityfocus.com/archive/1/archive/1/485727/100/0/threaded  View
320537 30212 CVE-2008-0095 MISC:http://bugs.digium.com/view.php?id=11637  View
320538 30212 CVE-2008-0095 CONFIRM:http://downloads.digium.com/pub/security/AST-2008-001.html  View
320539 30212 CVE-2008-0095 FEDORA:FEDORA-2008-0198  View
320540 30212 CVE-2008-0095 URL:https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00166.html  View
320541 30212 CVE-2008-0095 FEDORA:FEDORA-2008-0199  View
320542 30212 CVE-2008-0095 URL:https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00167.html  View
320543 30212 CVE-2008-0095 BID:27110  View
320544 30212 CVE-2008-0095 URL:http://www.securityfocus.com/bid/27110  View
320545 30212 CVE-2008-0095 SECUNIA:28299  View
320546 30212 CVE-2008-0095 URL:http://secunia.com/advisories/28299  View
320547 30212 CVE-2008-0095 VUPEN:ADV-2008-0019  View
320548 30212 CVE-2008-0095 URL:http://www.vupen.com/english/advisories/2008/0019  View
320549 30212 CVE-2008-0095 SECTRACK:1019152  View
320550 30212 CVE-2008-0095 URL:http://www.securitytracker.com/id?1019152  View
320551 30212 CVE-2008-0095 SECUNIA:28312  View
320552 30212 CVE-2008-0095 URL:http://secunia.com/advisories/28312  View
320553 30212 CVE-2008-0095 SREASON:3520  View
320554 30212 CVE-2008-0095 URL:http://securityreason.com/securityalert/3520  View
320555 30212 CVE-2008-0095 XF:asterisk-bye-also-dos(39361)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48597 JVNDB-2008-003907 MyPHP Forum における SQL インジェクションの脆弱性 MyPHP Forum には、SQL インジェクションの脆弱性が存在します。 CVE-2008-0099 30212 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003907.html  View