CVE - CVE-2008-2119

CVE-ID
CVE-2008-2119	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20080603 AST-2008-008: Remote Crash Vulnerability in SIP channel driver when run in pedantic mode URL:http://www.securityfocus.com/archive/1/493020/100/0/threaded CONFIRM:http://bugs.digium.com/view.php?id=12607 CONFIRM:http://downloads.digium.com/pub/security/AST-2008-008.html CONFIRM:http://svn.digium.com/view/asterisk?view=rev&revision=120109 EXPLOIT-DB:5749 URL:https://www.exploit-db.com/exploits/5749 GENTOO:GLSA-200905-01 URL:http://security.gentoo.org/glsa/glsa-200905-01.xml SECTRACK:1020166 URL:http://www.securitytracker.com/id?1020166 SECUNIA:30517 URL:http://secunia.com/advisories/30517 SECUNIA:34982 URL:http://secunia.com/advisories/34982 VUPEN:ADV-2008-1731 URL:~~http://www.vupen.com/english/advisories/2008/1731~~ (Obsolete source) XF:asterisk-asturidecode-dos(42823) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/42823
Assigning CNA
MITRE Corporation
Date Record Created
20080508	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20080508)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)