CVE-2008-3264: High severity digium asterisk s800i appliance vulnerability
Published Jul 24, 2008
·Updated
The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (traffic amplification) via an IAX2 FWDOWNL request.
Affected Software
122 affected components
Asterisk S800i Appliance=1.0
Asterisk S800i Appliance=1.0.1
Asterisk S800i Appliance=1.0.2
Asterisk S800i Appliance=1.0.3
Asterisk Asterisk Appliance Developer Kit=0.2
Asterisk Asterisk Appliance Developer Kit=0.3
Asterisk Asterisk Appliance Developer Kit=0.4
Asterisk Asterisk Appliance Developer Kit=0.5
Asterisk Asterisk Appliance Developer Kit=0.6
Asterisk Asterisk Appliance Developer Kit=0.6.0
Asterisk Asterisk Appliance Developer Kit=0.7
Asterisk Asterisk Appliance Developer Kit=0.8
Asterisk Asterisk Business Edition=a
Asterisk Asterisk Business Edition=b
Asterisk Asterisk Business Edition=b.1.3.2
Asterisk Asterisk Business Edition=b.1.3.3
Asterisk Asterisk Business Edition=b.2.2.0
Asterisk Asterisk Business Edition=b.2.2.1
Asterisk Asterisk Business Edition=b.2.3.1
Asterisk Asterisk Business Edition=b.2.3.2
Asterisk Asterisk Business Edition=b.2.3.3
Asterisk Asterisk Business Edition=b.2.3.4
Asterisk Asterisk Business Edition=b.2.3.6
Asterisk Asterisk Business Edition=b.2.5.0
Asterisk Asterisk Business Edition=b.2.5.3
Asterisk Asterisk Business Edition=b2.5.1
Asterisk Asterisk Business Edition=b2.5.2
Asterisk Asterisk Business Edition=c
Asterisk Asterisk Business Edition=c.1.0-beta7
Asterisk Asterisk Business Edition=c.1.0-beta8
Asterisk Asterisk Business Edition=c.1.6
Asterisk Asterisk Business Edition=c.1.6.1
Asterisk Asterisk Business Edition=c.1.6.2
Asterisk Asterisk Business Edition=c1.8.0
Asterisk Asterisk Business Edition=c1.8.1
Asterisk AsteriskNOW=beta_5
Asterisk AsteriskNOW=beta_6
Asterisk AsteriskNOW=beta_7
Asterisk AsteriskNOW=pre-release
Asterisk Open Source=1.0
Asterisk Open Source=1.0.0
Asterisk Open Source=1.0.1
Asterisk Open Source=1.0.2
Asterisk Open Source=1.0.3
Asterisk Open Source=1.0.3.4
Asterisk Open Source=1.0.4
Asterisk Open Source=1.0.5
Asterisk Open Source=1.0.6
Asterisk Open Source=1.0.7
Asterisk Open Source=1.0.8
Asterisk Open Source=1.0.9
Asterisk Open Source=1.0.11
Asterisk Open Source=1.0.11.1
Asterisk Open Source=1.0.12
Asterisk Open Source=1.2.0
Asterisk Open Source=1.2.0beta1
Asterisk Open Source=1.2.0beta2
Asterisk Open Source=1.2.1
Asterisk Open Source=1.2.2
Asterisk Open Source=1.2.3
Asterisk Open Source=1.2.4
Asterisk Open Source=1.2.5
Asterisk Open Source=1.2.6
Asterisk Open Source=1.2.7
Asterisk Open Source=1.2.7.1
Asterisk Open Source=1.2.8
Asterisk Open Source=1.2.9
Asterisk Open Source=1.2.9.1
Asterisk Open Source=1.2.10
Asterisk Open Source=1.2.11
Asterisk Open Source=1.2.12
Asterisk Open Source=1.2.12.1
Asterisk Open Source=1.2.13
Asterisk Open Source=1.2.14
Asterisk Open Source=1.2.15
Asterisk Open Source=1.2.16
Asterisk Open Source=1.2.17
Asterisk Open Source=1.2.18
Asterisk Open Source=1.2.19
Asterisk Open Source=1.2.20
Asterisk Open Source=1.2.21
Asterisk Open Source=1.2.21.1
Asterisk Open Source=1.2.22
Asterisk Open Source=1.2.23
Asterisk Open Source=1.2.24
Asterisk Open Source=1.2.25
Asterisk Open Source=1.2.26
Asterisk Open Source=1.2.26.1
Asterisk Open Source=1.2.26.2
Asterisk Open Source=1.2.27
Asterisk Open Source=1.2.28
Asterisk Open Source=1.2.29
Asterisk Open Source=1.4.0
Asterisk Open Source=1.4.1
Asterisk Open Source=1.4.2
Asterisk Open Source=1.4.3
Asterisk Open Source=1.4.4
Asterisk Open Source=1.4.5
Asterisk Open Source=1.4.6
Asterisk Open Source=1.4.7
Asterisk Open Source=1.4.7.1
Asterisk Open Source=1.4.8
Asterisk Open Source=1.4.9
Asterisk Open Source=1.4.10
Asterisk Open Source=1.4.10.1
Asterisk Open Source=1.4.11
Asterisk Open Source=1.4.12
Asterisk Open Source=1.4.12.1
Asterisk Open Source=1.4.13
Asterisk Open Source=1.4.14
Asterisk Open Source=1.4.15
Asterisk Open Source=1.4.16
Asterisk Open Source=1.4.16.1
Asterisk Open Source=1.4.16.2
Asterisk Open Source=1.4.17
Asterisk Open Source=1.4.18
Asterisk Open Source=1.4.18.1
Asterisk Open Source=1.4.19
Asterisk Open Source=1.4.19.1
Asterisk Open Source=1.4.19_rc3
Asterisk Open Source=1.4_revision_95946
Asterisk Open Source=1.4beta
Event History
Jul 24, 2008
CVE Published
via MITRE·03:18 PM
Data Sourced
via MITRE·03:18 PM
Description
Data Sourced
03:41 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-3264?
CVE-2008-3264 is classified as a high severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2008-3264?
The fix for CVE-2008-3264 involves upgrading Asterisk to the latest versions specified in the advisory.
3
Which versions are affected by CVE-2008-3264?
CVE-2008-3264 affects several versions of Asterisk, including Open Source versions 1.0.x, 1.2.x below 1.2.30, and 1.4.x below 1.4.21.2.
4
Can CVE-2008-3264 be exploited remotely?
Yes, CVE-2008-3264 allows remote attackers to exploit the vulnerability to execute arbitrary code.
5
Is my version of Asterisk affected by CVE-2008-3264?
To determine if your version of Asterisk is affected by CVE-2008-3264, check if it falls below the specified safe versions listed in the advisory.