CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
asteriskasterisk_appliance_developer_kit
𝑥
≤ 1.4
asteriskasterisk_appliance_developer_kit
0.2
asteriskasterisk_appliance_developer_kit
0.3
asteriskasterisk_appliance_developer_kit
0.4
asteriskasterisk_appliance_developer_kit
0.5
asteriskasterisk_appliance_developer_kit
0.6
asteriskasterisk_appliance_developer_kit
0.6.0
asteriskasterisk_appliance_developer_kit
0.7
asteriskasterisk_appliance_developer_kit
0.8
asteriskasterisk_appliance_developer_kit
1.3
asteriskasterisknow
𝑥
≤ 1.0.1
asteriskasterisknow
1.0
asteriskopen_source
𝑥
≤ 1.2.26
asteriskopen_source
𝑥
≤ 1.4.17
asteriskopen_source
𝑥
≤ 1.4.19
asteriskopen_source
1.0
asteriskopen_source
1.0.0
asteriskopen_source
1.0.1
asteriskopen_source
1.0.2
asteriskopen_source
1.0.3
asteriskopen_source
1.0.3.4
asteriskopen_source
1.0.4
asteriskopen_source
1.0.5
asteriskopen_source
1.0.6
asteriskopen_source
1.0.7
asteriskopen_source
1.0.8
asteriskopen_source
1.0.9
asteriskopen_source
1.0.11
asteriskopen_source
1.0.11.1
asteriskopen_source
1.0.12
asteriskopen_source
1.2.0
asteriskopen_source
1.2.0:beta1
asteriskopen_source
1.2.0:beta2
asteriskopen_source
1.2.0:rc1
asteriskopen_source
1.2.0beta2:beta2
asteriskopen_source
1.2.1
asteriskopen_source
1.2.2
asteriskopen_source
1.2.3
asteriskopen_source
1.2.4
asteriskopen_source
1.2.5
asteriskopen_source
1.2.6
asteriskopen_source
1.2.7
asteriskopen_source
1.2.7.1
asteriskopen_source
1.2.8
asteriskopen_source
1.2.9
asteriskopen_source
1.2.9.1
asteriskopen_source
1.2.10
asteriskopen_source
1.2.11
asteriskopen_source
1.2.12
asteriskopen_source
1.2.12.1
asteriskopen_source
1.2.13
asteriskopen_source
1.2.14
asteriskopen_source
1.2.15
asteriskopen_source
1.2.16
asteriskopen_source
1.2.17
asteriskopen_source
1.2.18
asteriskopen_source
1.2.19
asteriskopen_source
1.2.20
asteriskopen_source
1.2.21
asteriskopen_source
1.2.21.1
asteriskopen_source
1.2.22
asteriskopen_source
1.2.23
asteriskopen_source
1.2.24
asteriskopen_source
1.2.25
asteriskopen_source
1.2.26.1
asteriskopen_source
1.2.26.2
asteriskopen_source
1.4.0
asteriskopen_source
1.4.0:beta2
asteriskopen_source
1.4.0:beta3
asteriskopen_source
1.4.0:beta4
asteriskopen_source
1.4.1
asteriskopen_source
1.4.10
asteriskopen_source
1.4.10.1
asteriskopen_source
1.4.11
asteriskopen_source
1.4.12
asteriskopen_source
1.4.12.1
asteriskopen_source
1.4.13
asteriskopen_source
1.4.14
asteriskopen_source
1.4.15
asteriskopen_source
1.4.16
asteriskopen_source
1.4.16.1
asteriskopen_source
1.4.16.2
asteriskopen_source
1.4.18
asteriskopen_source
1.4.19:rc3
asterisks800i
𝑥
≤ 1.1.0.1
asterisks800i
1.0
asterisks800i
1.0.1
asterisks800i
1.0.2
asterisks800i
1.0.3
asterisks800i
1.0.3.3
asterisks800i
1.1.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
asterisk
bullseye
1:16.28.0~dfsg-0+deb11u4
fixed
bullseye (security)
1:16.28.0~dfsg-0+deb11u5
fixed
sid
1:22.0.0~dfsg+~cs6.14.60671435-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
asterisk
karmic
Fixed 1:1.4.17~dfsg-2ubuntu1
released
jaunty
Fixed 1:1.4.17~dfsg-2ubuntu1
released
intrepid
Fixed 1:1.4.17~dfsg-2ubuntu1
released
hardy
Fixed 1:1.4.17~dfsg-2ubuntu1
released
gutsy
ignored
feisty
ignored
edgy
ignored
dapper
ignored
Common Weakness Enumeration
References