CVE-2008-3264

Related Files

Gentoo Linux Security Advisory 200905-1

Posted May 3, 2009

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200905-01 - Multiple vulnerabilities have been found in Asterisk allowing for Denial of Service and username disclosure.

tags | advisory, denial of service, vulnerability

systems | linux, gentoo

advisories | CVE-2008-1897, CVE-2008-2119, CVE-2008-3263, CVE-2008-3264, CVE-2008-3903, CVE-2008-5558, CVE-2009-0041

SHA-256 | 8a221aac12797d099e480341a469baefe427ff3bc8ee0f6cb9b7b14595721e9d

Download | Favorite | View

AST-2008-011.txt

Posted Jul 23, 2008

Authored by Tilghman Lesher | Site asterisk.org

Asterisk Project Security Advisory - An attacker may request an Asterisk server to send part of a firmware image. However, as this firmware download protocol does not initiate a handshake, the source address may be spoofed. Therefore, an IAX2 FWDOWNL request for a firmware file may consume as little as 40 bytes, yet produces a 1040 byte response. Coupled with multiple geographically diverse Asterisk servers, an attacker may flood an victim site with unwanted firmware packets.

tags | advisory, spoof, protocol

advisories | CVE-2008-3264

SHA-256 | 033fd05fff387ab0474d5a49f0a057699dcb0943d8893658905cf254d19d1aa2

Download | Favorite | View