← Back to CVE List
Vulnerability Intelligence Report

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header.

No Active Exploit Signals
CVSS Base Score
8.8
HIGH
EPSS Probability:2.33%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Affected Products & Versions

Vendor Product Affected Versions
asterisk asterisk a, b.1.3.2, b.1.3.3, b.2.2.0, b.2.2.1, b.2.3.1, b.2.3.2, b.2.3.3, b.2.3.4, b.2.3.5, b.2.3.6, c.1.0_beta7, c.1.0_beta8, c.1.6, c.1.6.1
asterisk asterisk_appliance_developer_kit 0.2, 0.3, 0.4, 0.5, 0.6, 0.6.0, 0.7, 0.8, 1.3
asterisk asterisk_business_edition all
asterisk asterisknow 1.0
asterisk open_source 1.0, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.3.4, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.11, 1.0.11.1, 1.0.12, 1.2.0, 1.2.0beta2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.7.1, 1.2.8, 1.2.9, 1.2.9.1, 1.2.10, 1.2.11, 1.2.12, 1.2.12.1, 1.2.13, 1.2.14, 1.2.15, 1.2.16, 1.2.17, 1.2.18, 1.2.19, 1.2.20, 1.2.21, 1.2.21.1, 1.2.22, 1.2.23, 1.2.24, 1.2.25, 1.2.26.1, 1.2.26.2, 1.4.0, 1.4.1, 1.4.10, 1.4.10.1, 1.4.11, 1.4.12, 1.4.12.1, 1.4.13, 1.4.14, 1.4.15, 1.4.16, 1.4.16.1, 1.4.16.2, 1.4.18, 1.4.19
asterisk s800i 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.3.3, 1.1.0

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
2.327%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2008-03-13T00:00:00
Published2008-03-20T00:00:00
Patch Date2008-03-18
Last Updated2024-08-07T08:17:34

LINK COPIED TO CLIPBOARD