CVE-2008-3263

Related Files

Gentoo Linux Security Advisory 200905-1

Posted May 3, 2009

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200905-01 - Multiple vulnerabilities have been found in Asterisk allowing for Denial of Service and username disclosure.

tags | advisory, denial of service, vulnerability

systems | linux, gentoo

advisories | CVE-2008-1897, CVE-2008-2119, CVE-2008-3263, CVE-2008-3264, CVE-2008-3903, CVE-2008-5558, CVE-2009-0041

SHA-256 | 8a221aac12797d099e480341a469baefe427ff3bc8ee0f6cb9b7b14595721e9d

Download | Favorite | View

AST-2008-010.txt

Posted Jul 23, 2008

Authored by Jeremy McNamara | Site asterisk.org

Asterisk Project Security Advisory - By flooding an Asterisk server with IAX2 'POKE' requests, an attacker may eat up all call numbers associated with the IAX2 protocol on an Asterisk server and prevent other IAX2 calls from getting through. Due to the nature of the protocol, IAX2 POKE calls will expect an ACK packet in response to the PONG packet sent in response to the POKE. While waiting for this ACK packet, this dialog consumes an IAX2 call number, as the ACK packet must contain the same call number as was allocated and sent in the PONG.

tags | advisory, protocol

advisories | CVE-2008-3263

SHA-256 | d7ea9284131bcea62f7425642c3db4439b8033df1205a39d88ff0808e5893c71

Download | Favorite | View