QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-1289

Back to search

CVE-2008-1289

Published: Mar 24, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a zero to an arbitrary memory location via a large RTP payload number, related to the ast_rtp_unset_m_type function in main/rtp.c; or (2) write certain integers to an arbitrary memory location via a large number of RTP payloads, related to the process_sdp function in channels/chan_sip.c.

VendorProductVersions

n/a

n/a

affected
n/a

References

28308
vdb-entry
x_refsource_BID
3763
third-party-advisory
x_refsource_SREASON
1019628
vdb-entry
x_refsource_SECTRACK
29426
third-party-advisory
x_refsource_SECUNIA
FEDORA-2008-2554
vendor-advisory
x_refsource_FEDORA
ADV-2008-0928
vdb-entry
x_refsource_VUPEN
FEDORA-2008-2620
vendor-advisory
x_refsource_FEDORA
asterisk-rtppayload-bo(41302)
vdb-entry
x_refsource_XF
29470
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now