CVE-2008-5558
EUVD-2008-553317.12.2008, 17:30
Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| asterisk | open_source | 1.2.26 |
| asterisk | open_source | 1.2.26:netsec |
| asterisk | open_source | 1.2.26.1 |
| asterisk | open_source | 1.2.26.1:netsec |
| asterisk | open_source | 1.2.26.2 |
| asterisk | open_source | 1.2.26.2:netsec |
| asterisk | open_source | 1.2.27 |
| asterisk | open_source | 1.2.28 |
| asterisk | open_source | 1.2.29 |
| asterisk | open_source | 1.2.30 |
| asterisk | open_source | 1.2.30.2 |
| asterisk | open_source | 1.2.30.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References