CVE-2008-5558: Medium severity Asterisk Asterisk Business Edition vulnerability
Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable realtime IAX2 users (set 'realtime IAX2 users' to disabled) to mitigate remote denial-of-service via authentication attempts involving unknown users or hostname matching.
Asterisk / Asterisk Business Edition realtime IAX2 users = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5558?
CVE-2008-5558 has a severity rating associated with denial of service vulnerabilities.
How do I fix CVE-2008-5558?
To fix CVE-2008-5558, upgrade Asterisk to a version beyond 1.2.30.3 or apply the appropriate patches provided by the vendor.
Who is affected by CVE-2008-5558?
CVE-2008-5558 affects Asterisk Open Source versions from 1.2.26 through 1.2.30.3 and Business Edition versions from B.2.3.5 through B.2.5.5.
What is the impact of CVE-2008-5558?
The impact of CVE-2008-5558 is that it allows remote attackers to cause a denial of service (crash) of the Asterisk software.
How can I determine if my system is vulnerable to CVE-2008-5558?
To determine if your system is vulnerable to CVE-2008-5558, check if you are using an affected version of Asterisk as specified in the vulnerability details.