Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

asterisk asterisk business edition b.2.3.4 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2008-5558
Asterisk Open Source 1.2.26 up to and including 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote malicious users to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user ...
Asterisk Open Source 1.2.26.2Asterisk Open Source 1.2.30.3Asterisk Asterisk Business Edition B.2.5.0Asterisk Open Source 1.2.26Asterisk Open Source 1.2.27Asterisk Asterisk Business Edition B.2.5.1Asterisk Asterisk Business Edition B.2.5.3Asterisk Asterisk Business Edition B.2.3.5Asterisk Open Source 1.2.28Asterisk Open Source 1.2.29Asterisk Asterisk Business Edition B.2.3.4Asterisk Open Source 1.2.26.1Asterisk Open Source 1.2.30Asterisk Open Source 1.2.30.2
4.3
CVSSv2
CVE-2008-2119
Asterisk Open Source 1.0.x and 1.2.x prior to 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote malicious users to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a Fr...
Asterisk Asterisk Business Edition B.2.2.1Asterisk Asterisk Business Edition B.2.3.1Asterisk Open Source 1.0.0Asterisk Open Source 1.0.1Asterisk Open Source 1.0.5Asterisk Open Source 1.0.6Asterisk Open Source 1.2.10Asterisk Open Source 1.2.11Asterisk Open Source 1.2.17Asterisk Open Source 1.2.18Asterisk Open Source 1.2.23Asterisk Open Source 1.2.24Asterisk Asterisk Business Edition B.1.3.2Asterisk Asterisk Business Edition B.1.3.3Asterisk Asterisk Business Edition B.2.2.0Asterisk Asterisk Business Edition B2.5.1Asterisk Open Source 1.0Asterisk Open Source 1.0.3Asterisk Open Source 1.0.4Asterisk Open Source 1.2.0beta1Asterisk Open Source 1.2.0beta2Asterisk Open Source 1.2.1
4.3
CVSSv2
CVE-2007-6430
Asterisk Open Source 1.2.x prior to 1.2.26 and 1.4.x prior to 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations ("realtime") and host-based authentication, does not check the IP address when the usern...
Asterisk Asterisk Business Edition B.2.3.3Asterisk Asterisk Business Edition B.2.3.4Asterisk Asterisk Business Edition C.1.0beta7Asterisk Open Source 1.2.15Asterisk Open Source 1.2.16Asterisk Open Source 1.2.24Asterisk Open Source 1.2.25Asterisk Open Source 1.4.11Asterisk Open Source 1.4.12Asterisk Open Source 1.4.5Asterisk Open Source 1.4.6Asterisk Asterisk Business Edition B.2.2.0Asterisk Asterisk Business Edition B.2.2.1Asterisk Open Source 1.2.10Asterisk Open Source 1.2.11Asterisk Open Source 1.2.19Asterisk Open Source 1.2.21Asterisk Open Source 1.2.7Asterisk Open Source 1.2.8Asterisk Open Source 1.4.15Asterisk Open Source 1.4.2Asterisk Open Source 1.4.9
5
CVSSv2
CVE-2009-0041
IAX2 in Asterisk Open Source 1.2.x prior to 1.2.31, 1.4.x prior to 1.4.23-rc4, and 1.6.x prior to 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x prior to 1.3.0 responds differently to a failed logi...
Asterisk Open Source 1.2.1Asterisk Open Source 1.2.11Asterisk Open Source 1.2.0Asterisk Open Source 1.2.21.1Asterisk Open Source 1.2.2Asterisk Open Source 1.2.22Asterisk Open Source 1.2.16Asterisk Open Source 1.2.30.2Asterisk Open Source 1.2.30Asterisk Open Source 1.2.23Asterisk Open Source 1.2.26.2Asterisk Open Source 1.4.18.1Asterisk Open Source 1.4.17Asterisk Open Source 1.4.15Asterisk Open Source 1.4.14Asterisk Open Source 1.4.0Asterisk Open Source 1.4.8Asterisk Open Source 1.4.7Asterisk Open Source 1.4.2Asterisk Open Source 1.4betaAsterisk Open Source 1.4.21Asterisk Open Source 1.4.21.1
4.3
CVSSv2
CVE-2008-1897
The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x prior to 1.2.28, and 1.4.x prior to 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW prior to 1.0.3; Appliance Developer Kit 0.x.x; and s800i prior to 1.1.0.3, wh...
Asterisk Asterisk Business Edition C.1.6.2Asterisk Asterisk Appliance Developer Kit 0.3Asterisk Asterisk Business Edition B.2.2.0Asterisk Open Source 1.2.4Asterisk Open Source 1.2.8Asterisk Asterisk Appliance Developer Kit 0.6Asterisk Open Source 1.2.16Asterisk Asterisk Business Edition C.1.6.1Asterisk Open Source 1.0.1Asterisk S800i 1.0.3.3Asterisk Open Source 1.2.14Asterisk S800i 1.0Asterisk S800i 1.0.2Asterisk Open Source 1.2.20Asterisk Open SourceAsterisk Open Source 1.0.11Asterisk Asterisk Business Edition C.1.0Asterisk Open Source 1.2.12Asterisk Open Source 1.2.19Asterisk Asterisk Business EditionAsterisk Open Source 1.0.4Asterisk Open Source 1.0
7.1
CVSSv2
CVE-2008-1923
The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote malicious users to cause...
Asterisk Asterisk Business Edition B.1.3.2Asterisk Asterisk Business Edition B.1.3.3Asterisk Asterisk Business Edition C.1.0-beta7Asterisk Asterisk Business Edition C.1.0-beta8Asterisk Open Source 1.0.1Asterisk Open Source 1.0.11Asterisk Open Source 1.0.6Asterisk Open Source 1.0.7Asterisk Open Source 1.2.11Asterisk Open Source 1.2.12Asterisk Open Source 1.2.15Asterisk Open Source 1.2.19Asterisk Open Source 1.2.22Asterisk Open Source 1.2.26Asterisk Open Source 1.2.26.1Asterisk Open Source 1.2.3Asterisk Open Source 1.2.4Asterisk Open Source 1.2.7.1Asterisk Open Source 1.4.0Asterisk Open Source 1.4.12.1Asterisk Open Source 1.4.13Asterisk Open Source 1.4.18
7.8
CVSSv2
CVE-2008-3264
The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x prior to 1.2.30, and 1.4.x prior to 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x prior to 1.2.0.1 al...
Asterisk Asterisk Appliance Developer Kit 0.5Asterisk Asterisk Appliance Developer Kit 0.6Asterisk Asterisk Business Edition B.1.3.3Asterisk Asterisk Business Edition B.2.2.0Asterisk Asterisk Business Edition B.2.5.0Asterisk Asterisk Business Edition B.2.5.3Asterisk Asterisk Business Edition C.1.6.2Asterisk Asterisk Business Edition C1.8.0Asterisk Open Source 1.0.0Asterisk Asterisk Appliance Developer Kit 0.8Asterisk Asterisk Business Edition AAsterisk Asterisk Business Edition B.2.3.2Asterisk Asterisk Business Edition B.2.3.3Asterisk Asterisk Business Edition CAsterisk Asterisk Business Edition C.1.0-beta7Asterisk Asterisk Business Edition C.1.0-beta8Asterisk Asterisknow Beta 6Asterisk Asterisknow Beta 7Asterisk Open Source 1.0.12Asterisk Open Source 1.0.2Asterisk Open Source 1.0.9Asterisk Open Source 1.2.0
5
CVSSv2
CVE-2010-0685
The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern matches, allows context-dependent malicious users to inject strings into the dial...
Digium Asterisk 1.2.1Digium Asterisk 1.2.10Digium Asterisk 1.2.17Digium Asterisk 1.2.18Digium Asterisk 1.2.25Digium Asterisk 1.2.26Digium Asterisk 1.2.32Digium Asterisk 1.2.33Digium Asterisk 1.2.9Digium Asterisk 1.4.0Digium Asterisk 1.4.16Digium Asterisk 1.4.17Digium Asterisk 1.4.23Digium Asterisk 1.4.24Digium Asterisk 1.4.6Digium Asterisk 1.4.7Digium Asterisk 1.2.22Digium Asterisk 1.2.19Digium Asterisk 1.2.0Digium Asterisk 1.2.31.1Digium Asterisk 1.2.24Digium Asterisk 1.2.15
5
CVSSv2
CVE-2009-4055
rtp.c in Asterisk Open Source 1.2.x prior to 1.2.37, 1.4.x prior to 1.4.27.1, 1.6.0.x prior to 1.6.0.19, and 1.6.1.x prior to 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x before C.2.4.6, and C.3.x.x before C.3.2.3; and s800i 1.3.x prior to 1.3.0.6 allows remote malic...
Digium Asterisk 1.2.0Digium Asterisk 1.2.1Digium Asterisk 1.2.12.1Digium Asterisk 1.2.16Digium Asterisk 1.2.17Digium Asterisk 1.2.20Digium Asterisk 1.2.23Digium Asterisk 1.2.26.1Digium Asterisk 1.2.26.2Digium Asterisk 1.2.3Digium Asterisk 1.2.30Digium Asterisk 1.2.32Digium Asterisk 1.2.33Digium Asterisk 1.4.10Digium Asterisk 1.4.10.1Digium Asterisk 1.4.11Digium Asterisk 1.4.16.1Digium Asterisk 1.4.16.2Digium Asterisk 1.4.19Digium Asterisk 1.4.19.1Digium Asterisk 1.4.21Digium Asterisk 1.4.22
8.8
CVSSv2
CVE-2008-1332
Unspecified vulnerability in Asterisk Open Source 1.2.x prior to 1.2.27, 1.4.x prior to 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x prior to 1.0.2; Appliance Developer Kit prior to 1.4 revision 109393; and s80...
Asterisk Asterisk Business EditionAsterisk Open Source 1.0Asterisk Open Source 1.0.0Asterisk Open Source 1.0.4Asterisk Open Source 1.0.5Asterisk Open Source 1.2.9.1Asterisk Open Source 1.2.9Asterisk Open Source 1.2.25Asterisk Open Source 1.2.24Asterisk Open Source 1.2.18Asterisk Open Source 1.2.17Asterisk Open Source 1.2.11Asterisk Open Source 1.2.10Asterisk Open Source 1.4.0Asterisk Open Source 1.4.10.1Asterisk Open Source 1.4.12Asterisk Open Source 1.4.18Asterisk Open Source 1.4.19Asterisk Asterisk B.1.3.2Asterisk Asterisk B.2.3.5Asterisk Asterisk B.2.3.4Asterisk Open Source 1.2.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook