{"api_version":"1","generated_at":"2026-07-23T13:33:58+00:00","cve":"CVE-2008-1897","urls":{"html":"https://cve.report/CVE-2008-1897","api":"https://cve.report/api/cve/CVE-2008-1897.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-1897","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-1897"},"summary":{"title":"CVE-2008-1897","description":"The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls, does not verify that an ACK response contains a call number matching the server's reply to a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed ACK response that does not complete a 3-way handshake.  NOTE: this issue exists because of an incomplete fix for CVE-2008-1923.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-04-23 16:05:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-287","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml","name":"http://security.gentoo.org/glsa/glsa-200905-01.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  Asterisk: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/jcollie/asterisk/commit/60de4fbbdf3ede49f158e23a9e3b679f2e519c1e","name":"https://github.com/jcollie/asterisk/commit/60de4fbbdf3ede49f158e23a9e3b679f2e519c1e","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Merged revisions 114558 via svnmerge from · jcollie/asterisk@60de4fb · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://secunia.com/advisories/30042","name":"http://secunia.com/advisories/30042","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Debian update for asterisk - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30010","name":"http://secunia.com/advisories/30010","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Fedora update for asterisk - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/491220/100/0/threaded","name":"http://www.securityfocus.com/archive/1/491220/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1019918","name":"http://www.securitytracker.com/id?1019918","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Asterisk IAX2 Protocol Verification Bug Lets Remote Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://downloads.asterisk.org/pub/security/AST-2008-006.html","name":"https://downloads.asterisk.org/pub/security/AST-2008-006.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"AST-2008-006","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/mojolingo/asterisk/commit/20ac3662f137dbf7f42d5295590069a7d3b1166b","name":"https://github.com/mojolingo/asterisk/commit/20ac3662f137dbf7f42d5295590069a7d3b1166b","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Merged revisions 114558 via svnmerge from · mojolingo/asterisk@20ac366 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://github.com/xrg/asterisk-xrg/commit/51714a24347dc57f9a208a4a8af84115ef407b83","name":"https://github.com/xrg/asterisk-xrg/commit/51714a24347dc57f9a208a4a8af84115ef407b83","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Merged revisions 114558 via svnmerge from · xrg/asterisk-xrg@51714a2 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://bugs.digium.com/view.php?id=10078","name":"http://bugs.digium.com/view.php?id=10078","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"0010078: IAX2 protocol flaw in IC_NEW could cause reflective amplification DoS - Digium Issue Tracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/28901","name":"http://www.securityfocus.com/bid/28901","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Asterisk IAX2 Packet Amplification Remote Denial of Service Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://downloads.digium.com/pub/security/AST-2008-006.html","name":"http://downloads.digium.com/pub/security/AST-2008-006.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"AST-2008-006","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/34982","name":"http://secunia.com/advisories/34982","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo update for asterisk - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/pruiz/asterisk/commit/e0ef9bd22810c6969a7f222eec04798f19a7e2d6","name":"https://github.com/pruiz/asterisk/commit/e0ef9bd22810c6969a7f222eec04798f19a7e2d6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Merged revisions 114558 via svnmerge from · pruiz/asterisk@e0ef9bd · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://secunia.com/advisories/29927","name":"http://secunia.com/advisories/29927","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Asterisk IAX2 Handshake Denial of Service - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00581.html","name":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00581.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 7 Update: asterisk-1.4.19.1-1.fc7","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41966","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41966","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/xrg/asterisk-xrg/commit/10da3dab24e8ca08cf2c983f8d0206e383535b5a","name":"https://github.com/xrg/asterisk-xrg/commit/10da3dab24e8ca08cf2c983f8d0206e383535b5a","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"When we receive a full frame that is supposed to contain our call num… · xrg/asterisk-xrg@10da3da · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00600.html","name":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00600.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 8 Update: asterisk-1.4.19.1-1.fc8","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/1324","name":"http://www.vupen.com/english/advisories/2008/1324","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/lyx2014/Asterisk/commit/0670e43c30135044e25cca7f80e1833e2c128653","name":"https://github.com/lyx2014/Asterisk/commit/0670e43c30135044e25cca7f80e1833e2c128653","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Merged revisions 114558 via svnmerge from · lyx2014/Asterisk@0670e43 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://github.com/silentindark/asterisk-1/commit/fe8b7f31db687f8b9992864b82c93d22833019c7","name":"https://github.com/silentindark/asterisk-1/commit/fe8b7f31db687f8b9992864b82c93d22833019c7","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Merged revisions 114558 via svnmerge from · silentindark/asterisk-1@fe8b7f3 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://github.com/jcollie/asterisk/commit/a8b180875b037b8da26f6a3bcc8e5e98b8c904d2","name":"https://github.com/jcollie/asterisk/commit/a8b180875b037b8da26f6a3bcc8e5e98b8c904d2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Merged revisions 114558 via svnmerge from · jcollie/asterisk@a8b1808 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://github.com/jcollie/asterisk/commit/771b3d8749b34b6eea4e03a2e514380da9582f90","name":"https://github.com/jcollie/asterisk/commit/771b3d8749b34b6eea4e03a2e514380da9582f90","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Merged revisions 114558 via svnmerge from · jcollie/asterisk@771b3d8 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://github.com/kaoru6/asterisk/commit/1fe14f38dd43dc894d21f85762b51208ba5c8acb","name":"https://github.com/kaoru6/asterisk/commit/1fe14f38dd43dc894d21f85762b51208ba5c8acb","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Merged revisions 114558 via svnmerge from · kaoru6/asterisk@1fe14f3 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.altsci.com/concepts/page.php?s=asteri&p=2","name":"http://www.altsci.com/concepts/page.php?s=asteri&p=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"AltSci Concepts Computer Journal - AltSci Concepts IAX2 Exploit Framework","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2008/dsa-1563","name":"http://www.debian.org/security/2008/dsa-1563","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1563-1 asterisk","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1897","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1897","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisknow","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisknow","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"1.0.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisknow","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_appliance_developer_kit","cpe6":"0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_appliance_developer_kit","cpe6":"0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_appliance_developer_kit","cpe6":"0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_appliance_developer_kit","cpe6":"0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_appliance_developer_kit","cpe6":"0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_appliance_developer_kit","cpe6":"0.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_appliance_developer_kit","cpe6":"0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_appliance_developer_kit","cpe6":"0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.1.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.1.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.2.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.2.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.2.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.2.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.2.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.2.3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"b.2.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"c.1.0","cpe7":"beta7","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"c.1.0","cpe7":"beta8","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"c.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"c.1.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"c.1.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"b.2.5.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"c1.8.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"asterisk_business_edition","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.11","cpe7":"patch","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.11.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.11.1","cpe7":"patch","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.12","cpe7":"patch","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.0","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.0","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.10","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.11","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.12","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.12.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.12.1","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.13","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.14","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.15","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.16","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.17","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.18","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.19","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.2","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.20","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.21","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.21.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.21.1","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.22","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.23","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.24","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.25","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.26","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.26","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.26.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.26.1","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.26.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.26.2","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.3","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.4","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.5","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.6","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.7","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.7.1","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.8","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.2.9.1","cpe7":"netsec","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.0","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.0","cpe7":"beta3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.0","cpe7":"beta4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.10.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.12.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.16.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.16.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"1.4.18.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"1.2.27","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"1.4.19","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"open_source","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"s800i","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"s800i","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"s800i","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"s800i","cpe6":"1.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"s800i","cpe6":"1.0.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"s800i","cpe6":"1.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"s800i","cpe6":"1.1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"1897","vulnerable":"1","versionEndIncluding":"1.1.0.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"asterisk","cpe5":"s800i","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T08:40:59.845Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"GLSA-200905-01","tags":["vendor-advisory","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml"},{"name":"29927","tags":["third-party-advisory","x_transferred"],"url":"http://secunia.com/advisories/29927"},{"name":"asterisk-iax2protocol-ack-dos(41966)","tags":["vdb-entry","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41966"},{"name":"28901","tags":["vdb-entry","x_transferred"],"url":"http://www.securityfocus.com/bid/28901"},{"name":"30010","tags":["third-party-advisory","x_transferred"],"url":"http://secunia.com/advisories/30010"},{"name":"ADV-2008-1324","tags":["vdb-entry","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1324"},{"tags":["x_transferred"],"url":"http://downloads.digium.com/pub/security/AST-2008-006.html"},{"tags":["x_transferred"],"url":"http://bugs.digium.com/view.php?id=10078"},{"name":"FEDORA-2008-3390","tags":["vendor-advisory","x_transferred"],"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00600.html"},{"name":"20080422 AST-2008-006 - 3-way handshake in IAX2 incomplete","tags":["mailing-list","x_transferred"],"url":"http://www.securityfocus.com/archive/1/491220/100/0/threaded"},{"tags":["x_transferred"],"url":"http://www.altsci.com/concepts/page.php?s=asteri&p=2"},{"name":"30042","tags":["third-party-advisory","x_transferred"],"url":"http://secunia.com/advisories/30042"},{"name":"DSA-1563","tags":["vendor-advisory","x_transferred"],"url":"http://www.debian.org/security/2008/dsa-1563"},{"name":"34982","tags":["third-party-advisory","x_transferred"],"url":"http://secunia.com/advisories/34982"},{"name":"1019918","tags":["vdb-entry","x_transferred"],"url":"http://www.securitytracker.com/id?1019918"},{"name":"FEDORA-2008-3365","tags":["vendor-advisory","x_transferred"],"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00581.html"},{"tags":["x_transferred"],"url":"https://downloads.asterisk.org/pub/security/AST-2008-006.html"},{"tags":["x_transferred"],"url":"https://github.com/xrg/asterisk-xrg/commit/51714a24347dc57f9a208a4a8af84115ef407b83"},{"tags":["x_transferred"],"url":"https://github.com/jcollie/asterisk/commit/a8b180875b037b8da26f6a3bcc8e5e98b8c904d2"},{"tags":["x_transferred"],"url":"https://github.com/xrg/asterisk-xrg/commit/10da3dab24e8ca08cf2c983f8d0206e383535b5a"},{"tags":["x_transferred"],"url":"https://github.com/jcollie/asterisk/commit/771b3d8749b34b6eea4e03a2e514380da9582f90"},{"tags":["x_transferred"],"url":"https://github.com/pruiz/asterisk/commit/e0ef9bd22810c6969a7f222eec04798f19a7e2d6"},{"tags":["x_transferred"],"url":"https://github.com/jcollie/asterisk/commit/60de4fbbdf3ede49f158e23a9e3b679f2e519c1e"},{"tags":["x_transferred"],"url":"https://github.com/mojolingo/asterisk/commit/20ac3662f137dbf7f42d5295590069a7d3b1166b"},{"tags":["x_transferred"],"url":"https://github.com/silentindark/asterisk-1/commit/fe8b7f31db687f8b9992864b82c93d22833019c7"},{"tags":["x_transferred"],"url":"https://github.com/kaoru6/asterisk/commit/1fe14f38dd43dc894d21f85762b51208ba5c8acb"},{"tags":["x_transferred"],"url":"https://github.com/lyx2014/Asterisk/commit/0670e43c30135044e25cca7f80e1833e2c128653"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-04-22T00:00:00.000Z","descriptions":[{"lang":"en","value":"The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls, does not verify that an ACK response contains a call number matching the server's reply to a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed ACK response that does not complete a 3-way handshake.  NOTE: this issue exists because of an incomplete fix for CVE-2008-1923."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2023-10-20T02:02:11.362Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"GLSA-200905-01","tags":["vendor-advisory"],"url":"http://security.gentoo.org/glsa/glsa-200905-01.xml"},{"name":"29927","tags":["third-party-advisory"],"url":"http://secunia.com/advisories/29927"},{"name":"asterisk-iax2protocol-ack-dos(41966)","tags":["vdb-entry"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41966"},{"name":"28901","tags":["vdb-entry"],"url":"http://www.securityfocus.com/bid/28901"},{"name":"30010","tags":["third-party-advisory"],"url":"http://secunia.com/advisories/30010"},{"name":"ADV-2008-1324","tags":["vdb-entry"],"url":"http://www.vupen.com/english/advisories/2008/1324"},{"url":"http://downloads.digium.com/pub/security/AST-2008-006.html"},{"url":"http://bugs.digium.com/view.php?id=10078"},{"name":"FEDORA-2008-3390","tags":["vendor-advisory"],"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00600.html"},{"name":"20080422 AST-2008-006 - 3-way handshake in IAX2 incomplete","tags":["mailing-list"],"url":"http://www.securityfocus.com/archive/1/491220/100/0/threaded"},{"url":"http://www.altsci.com/concepts/page.php?s=asteri&p=2"},{"name":"30042","tags":["third-party-advisory"],"url":"http://secunia.com/advisories/30042"},{"name":"DSA-1563","tags":["vendor-advisory"],"url":"http://www.debian.org/security/2008/dsa-1563"},{"name":"34982","tags":["third-party-advisory"],"url":"http://secunia.com/advisories/34982"},{"name":"1019918","tags":["vdb-entry"],"url":"http://www.securitytracker.com/id?1019918"},{"name":"FEDORA-2008-3365","tags":["vendor-advisory"],"url":"https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00581.html"},{"url":"https://downloads.asterisk.org/pub/security/AST-2008-006.html"},{"url":"https://github.com/xrg/asterisk-xrg/commit/51714a24347dc57f9a208a4a8af84115ef407b83"},{"url":"https://github.com/jcollie/asterisk/commit/a8b180875b037b8da26f6a3bcc8e5e98b8c904d2"},{"url":"https://github.com/xrg/asterisk-xrg/commit/10da3dab24e8ca08cf2c983f8d0206e383535b5a"},{"url":"https://github.com/jcollie/asterisk/commit/771b3d8749b34b6eea4e03a2e514380da9582f90"},{"url":"https://github.com/pruiz/asterisk/commit/e0ef9bd22810c6969a7f222eec04798f19a7e2d6"},{"url":"https://github.com/jcollie/asterisk/commit/60de4fbbdf3ede49f158e23a9e3b679f2e519c1e"},{"url":"https://github.com/mojolingo/asterisk/commit/20ac3662f137dbf7f42d5295590069a7d3b1166b"},{"url":"https://github.com/silentindark/asterisk-1/commit/fe8b7f31db687f8b9992864b82c93d22833019c7"},{"url":"https://github.com/kaoru6/asterisk/commit/1fe14f38dd43dc894d21f85762b51208ba5c8acb"},{"url":"https://github.com/lyx2014/Asterisk/commit/0670e43c30135044e25cca7f80e1833e2c128653"}]}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-1897","datePublished":"2008-04-23T00:00:00.000Z","dateReserved":"2008-04-20T00:00:00.000Z","dateUpdated":"2024-08-07T08:40:59.845Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-04-23 16:05:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-287","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C05B437-C292-4AA0-8AFE-1CA07CD80034"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0102C4C0-1A7D-4AB7-9817-44E6B0DB761E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.4:*:*:*:*:*:*:*","matchCriteriaId":"81DDF486-4185-48EE-869E-0AA6726C31F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.5:*:*:*:*:*:*:*","matchCriteriaId":"CF45A8E1-F6B1-42BD-9168-12062FA6EAEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C5757B9B-2759-439A-9A6D-CCDD6C8C8940"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E4548D39-0562-4946-AA51-A7C1A31AEE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.7:*:*:*:*:*:*:*","matchCriteriaId":"FCD71268-EAA2-477B-8AC4-DE4853A262B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.8:*:*:*:*:*:*:*","matchCriteriaId":"529B2115-A191-4F3F-8F8C-A38B7C45463A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"b.2.5.1","matchCriteriaId":"3097291D-BBBB-4C69-8909-D6F7AC622B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*","versionEndIncluding":"c1.8.0","matchCriteriaId":"267F32ED-B9E4-4454-99C1-F445E52EE96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:a:*:*:*:*:*:*:*","matchCriteriaId":"313B3A38-8DEA-4D62-A1A4-0B6011E81870"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"802F8680-AB38-41AF-BFC8-F6927F6B1626"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BCAE8D90-B032-4C60-B487-BE655D00FFAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"AB64A872-B7B8-46A8-81E4-49EDAC160531"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"21000270-C9B9-430C-A252-763887A15835"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"12F7CF45-5482-4947-8F1D-48C746987475"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7B64995D-7892-49AB-A89D-A5D15615C5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0397DBD4-EA00-444A-9008-4932F99DF325"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6FCD865F-BC39-4255-A797-6E5945773337"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"D7203093-7209-4184-92CB-08AD73FAC379"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"E4956871-4DD3-4299-8BEB-9D98A4449A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0:beta7:*:*:*:*:*:*","matchCriteriaId":"F981A428-E7F3-4DE5-91DC-60A1C5C6C6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0:beta8:*:*:*:*:*:*","matchCriteriaId":"AF94C93A-723D-4DC5-9342-F091C8C6FF7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E5C988FD-CFB9-4763-BE5A-B89FB3538FD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"00A6DAD0-D4C3-4A58-A35A-991E04B50EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6413B123-65DE-4483-A8A0-F5F30A809570"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"272DE03B-1470-45FF-A31B-2CE44A8E8378"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC6FE17C-3B08-4675-9F73-5DC0C2438BB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:asterisknow:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D8AB81C-3DCF-42E9-8022-2F7135022C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.27","matchCriteriaId":"BB10847E-585B-492B-A174-4D1C14755E0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.19","matchCriteriaId":"6BD2F115-4614-4E25-8902-356EEC966E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:*:*:*:*:*:*:*","matchCriteriaId":"678DB154-4363-42FF-8B28-367923FC6595"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0B41BC83-3AE3-4C89-A682-E24A4EFF9605"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"98F2FE25-8CDA-4D6D-884B-82C4D90F7FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E8F2C378-FF0E-4765-9F66-625C4064D5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A55A9295-F632-4856-90A1-38371EB98589"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7FAE6AF1-884D-41F7-B174-9E13C7719C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCA9E35B-9A6B-42F2-9315-9C7D09F62227"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"89B1F293-4F0F-48FD-A1F1-1230B94D87D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DDF7EC20-A424-45E5-B7E4-3CC86075858C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C790E105-55C8-4CDC-9FA8-E1FF6F130A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"44C860EF-2B29-4995-B942-000CC43FDD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1ADB80EF-C724-44BA-88FC-24087799D0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"78B39BE8-7E2D-42DF-8633-44CAD5662777"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F39036E3-0027-4C72-9DEB-9A6E2B4512C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A037E6F9-3EF7-4EEB-AC16-081421BCE40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11:patch:*:*:*:*:*:*","matchCriteriaId":"A553D442-A573-4A60-8514-3C70F651756D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6A7EC02A-9C9E-4589-BBB3-1908D3078A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.11.1:patch:*:*:*:*:*:*","matchCriteriaId":"2395C742-D9FE-466F-BC97-67A846539121"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6C70FA9C-6F3B-4BDF-97FB-81D06AB0EE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.0.12:patch:*:*:*:*:*:*","matchCriteriaId":"58487C69-86C0-4736-BC90-4292AF8E3DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F7971E1-F136-4ADC-95EC-BC4F92E838CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E62D108C-862D-4BDB-BE37-285AA4C9C59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"CF1422F3-829D-498C-83A6-02989DFB70A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CBEB9D69-A404-4053-92F9-CAC3481AFF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E816CCDB-4169-4F09-AE87-E467F4BE7685"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"27202966-2C41-4964-9497-1887D2A834C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1471B5A2-15BE-4E7C-BA49-2E6002F7C8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.2:netsec:*:*:*:*:*:*","matchCriteriaId":"65223182-1675-462C-AF67-4A48760A63F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7108D72F-5AFD-4EEF-B2A9-CA4FA792E193"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.3:netsec:*:*:*:*:*:*","matchCriteriaId":"DC7EB4CD-6436-4E0B-A620-9DF2AC8A3C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"107DA2D8-FE7C-4B70-856D-43D58B988694"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.4:netsec:*:*:*:*:*:*","matchCriteriaId":"02D5E6DF-7C9C-479F-986B-D5C8A144ACB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"ABD71DD9-8A15-45E2-9FB3-F0544D7E1B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.5:netsec:*:*:*:*:*:*","matchCriteriaId":"68AF6200-1385-449F-A00E-2BACEE16450B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5C14614F-4E27-40A6-9E56-2B1DBB10330B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.6:netsec:*:*:*:*:*:*","matchCriteriaId":"61C0769F-6739-41D2-ADD8-924AC04C5F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7A2F2F5A-66FD-4057-917C-66332A88D83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7:netsec:*:*:*:*:*:*","matchCriteriaId":"8EF13987-5767-4FED-9584-63D74B0A30A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"399B0206-B48B-46EF-8CA6-A6E5A2550B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.7.1:netsec:*:*:*:*:*:*","matchCriteriaId":"C57C1324-E11A-4B2B-9722-A4A63AEF0497"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"26E9760F-C0EB-47BB-8DA4-CC7815099DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.8:netsec:*:*:*:*:*:*","matchCriteriaId":"EE6D9718-D57D-48F6-A2B1-CECAFFCDDFB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4C510A9A-C3E2-4AF8-9919-1A22E918CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6BD915CD-A7D3-4305-A6C0-290C648A226C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.9.1:netsec:*:*:*:*:*:*","matchCriteriaId":"3249AB40-2058-42E9-9A33-64E434E5BB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9E79CCE5-C29B-4726-8D2F-BC20F70959BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.10:netsec:*:*:*:*:*:*","matchCriteriaId":"0CF6584D-A7BB-4BD5-8232-9293FEE4A971"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"F29C13DB-6F04-4B41-90A2-2408D70F3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.11:netsec:*:*:*:*:*:*","matchCriteriaId":"174D6B56-7D0F-46F0-849A-FD05CB348FAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0F4F734E-0E78-4957-B323-8E9FBA7FF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12:netsec:*:*:*:*:*:*","matchCriteriaId":"938F545A-F8A7-455E-8E5A-2B5454B6CE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"1A4B117B-E945-4033-A79D-10DFAA3DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.12.1:netsec:*:*:*:*:*:*","matchCriteriaId":"E7C0897A-C841-4AAB-A6B3-1FCF7A99A60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"EA6D866F-8189-4FFD-AA24-47C0A015C246"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.13:netsec:*:*:*:*:*:*","matchCriteriaId":"B2BAA1B3-7DD3-4248-915D-2BCC0ACFA2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"A4EBFB79-C269-4132-BFAB-451F66CE8289"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.14:netsec:*:*:*:*:*:*","matchCriteriaId":"21612C17-7368-4108-B55B-5AB5CA6733E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E9E1028E-2C07-4BA3-B891-FA853A87B280"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.15:netsec:*:*:*:*:*:*","matchCriteriaId":"8A0D57D7-15AD-4CDF-A5A7-AB83F8E6154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9E74F577-70BD-4FAF-BCFD-10CD21FC5601"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.16:netsec:*:*:*:*:*:*","matchCriteriaId":"06DB25C8-4EA5-465F-8EFA-BCA8D40F1795"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"57BB03E2-E61C-4A94-82DF-8720698CE271"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.17:netsec:*:*:*:*:*:*","matchCriteriaId":"A149F8C2-3DA5-44B2-A288-3482F3975824"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"1B30A36F-5CE6-4246-8752-176FB5999C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.18:netsec:*:*:*:*:*:*","matchCriteriaId":"9462B320-B69D-409D-8DCC-D8D6CA1A757D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"E0F76DFD-4DAC-4B02-8967-B242CDEEF6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.19:netsec:*:*:*:*:*:*","matchCriteriaId":"ECCCBAE9-8FD4-43F0-9EF8-56E9BBA3D8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"6A59BC20-3217-4584-9196-D1CD9E0D6B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.20:netsec:*:*:*:*:*:*","matchCriteriaId":"BEA0014A-659B-4533-A393-6D4ADC80EB0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"56F728BA-FC9E-4EEE-9A08-C9C7433BD8D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21:netsec:*:*:*:*:*:*","matchCriteriaId":"8F1621F9-7C84-4CF0-BBCD-CEAEE8683BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*","matchCriteriaId":"3C64DF29-5B3D-401E-885E-8E37FD577254"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.21.1:netsec:*:*:*:*:*:*","matchCriteriaId":"346C9F65-B5FB-4A75-8E1B-137112F270D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"1A7BF52A-2FF8-40ED-B757-28A1101DE8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.22:netsec:*:*:*:*:*:*","matchCriteriaId":"7EFEE380-0C64-4413-AF3A-45ABC8833500"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"7A321C2D-852B-4498-ADD6-79956410AB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.23:netsec:*:*:*:*:*:*","matchCriteriaId":"8CA18FC6-1480-400E-A885-8CDAE45AA7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"9D5F0DCF-C6A2-4A09-90C9-D70F174FDEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.24:netsec:*:*:*:*:*:*","matchCriteriaId":"93741261-378B-4C02-8D68-0E5F39128375"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"C820538E-14EC-43C1-80DB-6AAE4905EF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.25:netsec:*:*:*:*:*:*","matchCriteriaId":"07CF9DD6-B624-49F0-A8E4-7EBCE7932BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"E9562112-2505-4F78-86DE-F30EFAEE47D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:*","matchCriteriaId":"9EEA1E9C-C1FB-4EFD-86EA-DCF78C57FC35"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"1A6D8FD0-C8C1-4868-9AF1-96B1949C18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:*","matchCriteriaId":"5E20FAF7-9031-478E-A89C-D6FB3B5FDE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"72A840B4-216B-4063-997F-791FBC8C8658"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:*","matchCriteriaId":"72375576-F857-4585-A677-A326D89A65B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"967DF432-DEF4-4FA2-8C8D-19A7FB663A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"40850BF4-E252-4667-9B46-9B6FEF6E997D"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"1BB01DD1-B29B-4210-88CC-9ADB3148A410"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"5C0FA6A3-BFA9-4397-B75B-75C8357C36B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"295D4042-2D3C-481B-B969-2DDAC1161198"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"044FD0D0-FC92-4A01-B0D4-11A703EF21FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.10.1:*:*:*:*:*:*:*","matchCriteriaId":"3477EC1A-9634-492C-B052-35770A9C9F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"1C90F104-FA2C-4091-B149-1774AC982C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"C9328768-7C08-4143-B5F8-F5C2D735D21A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.12.1:*:*:*:*:*:*:*","matchCriteriaId":"6C04E2B3-094B-4828-A2FC-BB66244A9F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"4BDE3D31-4BB2-45A3-B085-8C91152A3152"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"CE0107D4-395E-45F1-B963-7618CCC007D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"53B8E11B-4984-45A8-A107-D276205988B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"2495DB98-F923-4E60-86EC-2DBB7A98C90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E186D125-996E-4900-A2B8-5CDC8B5D5136"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.16.2:*:*:*:*:*:*:*","matchCriteriaId":"27DC6CF7-4DF8-4472-A684-8CCB5E26FCFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"88576385-EF03-408B-9775-B52E6AFFE48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18:*:*:*:*:*:*:*","matchCriteriaId":"1A838577-2BA1-4792-8B69-6FB07FFD7727"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:open_source:1.4.18.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEED3E1-13E0-46E6-8AAB-D24D2D04AE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0.2","matchCriteriaId":"15C01793-C5D3-4359-B332-A8A104832370"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0C3A0A08-4107-4B8B-AE7E-DC23849A54DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9320928D-D83C-4258-AF62-AB2D1F50D972"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"569084D1-977D-41FC-A444-0B3F5199DDD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"02D182FB-761C-4F08-A776-B613FAC55230"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C9046D49-6878-4571-8B9E-2FBD5BA80D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B5EDAB-61DD-4864-A159-39292D339DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:asterisk:s800i:1.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"101DFEFB-7627-4D36-AAA2-EDFB4D0E5AB5"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"1897","Ordinal":"1","Title":"CVE-2008-1897","CVE":"CVE-2008-1897","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"1897","Ordinal":"1","NoteData":"The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls, does not verify that an ACK response contains a call number matching the server's reply to a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed ACK response that does not complete a 3-way handshake.  NOTE: this issue exists because of an incomplete fix for CVE-2008-1923.","Type":"Description","Title":"CVE-2008-1897"},{"CveYear":"2008","CveId":"1897","Ordinal":"2","NoteData":"2008-04-23","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"1897","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}