CVE-2008-5744: High severity Asterisk Zaptel vulnerability
Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to an incorrect tor2 patch for CVE-2008-5396 that uses the wrong variable in a range check against the value of lc->sync.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Prevent non-root users (including members of the dialout group) from writing to the device node /dev/zap/ctl. For example, make root the owner and remove group/other write permissions: chown root:root /dev/zap/ctl && chmod 0600 /dev/zap/ctl
- Compensating control
Remove local accounts that do not require telephony device access from the dialout group to prevent them from writing to /dev/zap/ctl (e.g., gpasswd -d <username> dialout or deluser <username> dialout)
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5744?
CVE-2008-5744 is considered a high severity vulnerability due to its potential for local users to overwrite critical kernel memory.
How do I fix CVE-2008-5744?
To fix CVE-2008-5744, update to a patched version of the Zaptel driver that addresses the array index error.
What specific software versions are affected by CVE-2008-5744?
CVE-2008-5744 affects Zaptel versions 1.4.11 and earlier, as well as 1.2.27 and other 1.2 versions.
Who is affected by CVE-2008-5744?
Local users in the dialout group are impacted by CVE-2008-5744, allowing them to exploit this vulnerability.
What type of vulnerability is CVE-2008-5744?
CVE-2008-5744 is an array index error vulnerability in the DAHDI driver related to improper range checking.