NVD

Id
1860  
Name
CVE-2008-1923  
Description
The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-04-23  
Modified Date
2008-11-15  
Seq
2008-1923  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12002 1860 CVE-2008-1923 http://bugs.digium.com/view.php?id=10078  View
12003 1860 CVE-2008-1923 http://downloads.digium.com/pub/security/AST-2008-006.html  View
12004 1860 CVE-2008-1923 http://www.altsci.com/concepts/page.php?s=asteri&p=1  View
12005 1860 CVE-2008-1923 asterisk-new-dos(42049)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47676 JVNDB-2008-002986 Asterisk の IAX2 チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 Asterisk の IAX2 チャネルドライバ (chan_iax2) は、非認証呼び出しの許可を設定している際、NEW メッセージの未検証の送信元 IP アドレスに "初期オーディオ" を送信するため、サービス運用妨害 (トラフィック増幅) 状態となる脆弱性が存在します。 CVE-2008-1923 32036 CVE-2008-1923 1860 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002986.html 2008-04-22 2012-06-26 View