CVE

Id
32236  
CVE No.
CVE-2008-2119  
Status
Candidate  
Description
Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.  
Phase
Assigned (20080508)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
348160 32236 CVE-2008-2119 BUGTRAQ:20080603 AST-2008-008: Remote Crash Vulnerability in SIP channel driver when run in pedantic mode  View
348161 32236 CVE-2008-2119 URL:http://www.securityfocus.com/archive/1/archive/1/493020/100/0/threaded  View
348162 32236 CVE-2008-2119 MILW0RM:5749  View
348163 32236 CVE-2008-2119 URL:http://www.milw0rm.com/exploits/5749  View
348164 32236 CVE-2008-2119 CONFIRM:http://bugs.digium.com/view.php?id=12607  View
348165 32236 CVE-2008-2119 CONFIRM:http://downloads.digium.com/pub/security/AST-2008-008.html  View
348166 32236 CVE-2008-2119 CONFIRM:http://svn.digium.com/view/asterisk?view=rev&revision=120109  View
348167 32236 CVE-2008-2119 GENTOO:GLSA-200905-01  View
348168 32236 CVE-2008-2119 URL:http://security.gentoo.org/glsa/glsa-200905-01.xml  View
348169 32236 CVE-2008-2119 SECUNIA:34982  View
348170 32236 CVE-2008-2119 URL:http://secunia.com/advisories/34982  View
348171 32236 CVE-2008-2119 VUPEN:ADV-2008-1731  View
348172 32236 CVE-2008-2119 URL:http://www.vupen.com/english/advisories/2008/1731  View
348173 32236 CVE-2008-2119 SECTRACK:1020166  View
348174 32236 CVE-2008-2119 URL:http://www.securitytracker.com/id?1020166  View
348175 32236 CVE-2008-2119 SECUNIA:30517  View
348176 32236 CVE-2008-2119 URL:http://secunia.com/advisories/30517  View
348177 32236 CVE-2008-2119 XF:asterisk-asturidecode-dos(42823)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50454 JVNDB-2008-005764 SAP ITS の WGate におけるクロスサイトスクリプティングの脆弱性 SAP Internet Transaction Server (ITS) の WGate には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-2123 32236 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005764.html  View