Asterisk Call Authentication Security Bypass Vulnerability

Bugtraq ID:	28310
Class:	Design Error
CVE:	CVE-2008-1332
Remote:	Yes
Local:	No
Published:	Mar 18 2008 12:00AM
Updated:	Apr 28 2008 02:06PM
Credit:	Jason Parker reported this issue.
Vulnerable:	S.u.S.E. openSUSE 10.2 S.u.S.E. Linux 10.1 x86-64 S.u.S.E. Linux 10.1 x86 S.u.S.E. Linux 10.1 ppc Red Hat Fedora 8 Red Hat Fedora 7 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Asterisk s800i Appliance 1.1 .0 Asterisk AsteriskNow 1.0 Asterisk Asterisk Business Edition C.1.6.1 Asterisk Asterisk Business Edition C.1.0-beta7 Asterisk Asterisk Business Edition B.2.3.6 Asterisk Asterisk Business Edition B.2.3.4 Asterisk Asterisk Business Edition B.2.3.3 Asterisk Asterisk Business Edition B.2.3.2 Asterisk Asterisk Business Edition B.2.3.1 Asterisk Asterisk Business Edition B.2.2.1 Asterisk Asterisk Business Edition B.2.2.1 Asterisk Asterisk Business Edition B.2.2.0 Asterisk Asterisk Business Edition B.2.2.0 Asterisk Asterisk Business Edition B.1.3.3 Asterisk Asterisk Business Edition B.1.3.2 Asterisk Asterisk Business Edition A Asterisk Asterisk Appliance Developer Kit 1.4 Asterisk Asterisk 1.4.17 Asterisk Asterisk 1.4.16 Asterisk Asterisk 1.4.15 Asterisk Asterisk 1.4.14 Asterisk Asterisk 1.4.13 Asterisk Asterisk 1.4.12 Asterisk Asterisk 1.4.11 Asterisk Asterisk 1.4.10 Asterisk Asterisk 1.4.9 Asterisk Asterisk 1.4.8 Asterisk Asterisk 1.4.7 Asterisk Asterisk 1.4.6 Asterisk Asterisk 1.4.5 Asterisk Asterisk 1.4.4 Asterisk Asterisk 1.4.3 Asterisk Asterisk 1.4.2 Asterisk Asterisk 1.4.1 Asterisk Asterisk 1.2.26 Asterisk Asterisk 1.2.25 Asterisk Asterisk 1.2.24 Asterisk Asterisk 1.2.23 Asterisk Asterisk 1.2.22 Asterisk Asterisk 1.2.21 Asterisk Asterisk 1.2.19 Asterisk Asterisk 1.2.18 Asterisk Asterisk 1.2.17 Asterisk Asterisk 1.2.16 Asterisk Asterisk 1.2.15 Asterisk Asterisk 1.2.14 Asterisk Asterisk 1.2.13 Asterisk Asterisk 1.2.11 Asterisk Asterisk 1.2.11 Asterisk Asterisk 1.2.10 Asterisk Asterisk 1.2.9 Asterisk Asterisk 1.2.8 Asterisk Asterisk 1.2.7 Asterisk Asterisk 1.2.6 Asterisk Asterisk 1.2.5 Asterisk Asterisk 1.2 .0-beta2 Asterisk Asterisk 1.2 .0-beta1 Asterisk Asterisk 1.0.12 Asterisk Asterisk 1.0.11 Asterisk Asterisk 1.0.10 Asterisk Asterisk 1.0.9 Asterisk Asterisk 1.0.8 Asterisk Asterisk 1.0.7 Asterisk Asterisk 1.0.6 Asterisk Asterisk 1.0 Asterisk Asterisk C.1.0 Asterisk Asterisk 1.4 Beta Asterisk Asterisk 1.0.3.4
Not Vulnerable:	Asterisk s800i Appliance 1.1 .2 Asterisk AsteriskNow 1.0.2 Asterisk Asterisk Business Edition C.1.6.2 Asterisk Asterisk Business Edition B.2.5.1 Asterisk Asterisk Appliance Developer Kit 1.4.revision 109393 Asterisk Asterisk 1.4.19 -rc3 Asterisk Asterisk 1.2.27 Asterisk Asterisk 1.4.18.1

Asterisk Call Authentication Security Bypass Vulnerability

Asterisk is prone to a security-bypass vulnerability that allows attackers to make unauthenticated calls through the SIP channel driver.

Exploiting this issue may also aid in other attacks.

This issue affects the following versions:

Asterisk Open Source prior to 1.2.27
Asterisk Open Source prior to 1.4.18.1 and 1.4.19-rc3.
Asterisk Open Source prior to 1.6.0-beta6
Asterisk Business Edition all A versions
Asterisk Business Edition prior to B.2.5.1
Asterisk Business Edition prior to C.1.6.2
AsteriskNOW prior to 1.0.2
Asterisk Appliance Developer Kit prior to Asterisk 1.4 revision 109393
s800i (Asterisk Appliance) prior to 1.1.0.2

Asterisk Call Authentication Security Bypass Vulnerability

Attackers can use standard tools to exploit this issue.

Asterisk Call Authentication Security Bypass Vulnerability

Solution:
The vendor released updates to address this issue. Please see the references for more information.

Asterisk Call Authentication Security Bypass Vulnerability

References:

• Asterisk Homepage (Asterisk)
  
• AST-2008-003: Unauthenticated calls allowed from SIP channel driver (Asterisk Security Team )
  
• [SECURITY] Fedora 7 Update: asterisk-1.4.18.1-1.fc7 (Red Hat)
  
• [SECURITY] Fedora 8 Update: asterisk-1.4.18.1-1.fc8 (Red Hat)
  
• Asterisk Project Security Advisory - AST-2008-003 (Asterisk)