Asterisk IAX2 Firmware Provisioning Packet Amplification Remote Denial of Service Vulnerability
BID:30350
Info
Asterisk IAX2 Firmware Provisioning Packet Amplification Remote Denial of Service Vulnerability
| Bugtraq ID: | 30350 |
| Class: | Design Error |
| CVE: |
CVE-2008-3264 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 22 2008 12:00AM |
| Updated: | May 05 2009 01:37AM |
| Credit: | Tilghman Lesher |
| Vulnerable: |
Gentoo Linux Asterisk s800i Appliance 1.0.3 Asterisk s800i Appliance 1.0.2 Asterisk s800i Appliance 1.0.1 Asterisk s800i Appliance 1.0 Asterisk AsteriskNow pre-release Asterisk Asterisk Business Edition C.1.8.1 Asterisk Asterisk Business Edition C.1.6.2 Asterisk Asterisk Business Edition C.1.6.1 Asterisk Asterisk Business Edition C.1.6 Asterisk Asterisk Business Edition C.1.0-beta8 Asterisk Asterisk Business Edition C.1.0-beta7 Asterisk Asterisk Business Edition C Asterisk Asterisk Business Edition B.2.5.3 Asterisk Asterisk Business Edition B.2.5.2 Asterisk Asterisk Business Edition B.2.5.1 Asterisk Asterisk Business Edition B.2.3.6 Asterisk Asterisk Business Edition B.2.3.4 Asterisk Asterisk Business Edition B.2.3.3 Asterisk Asterisk Business Edition B.2.3.2 Asterisk Asterisk Business Edition B.2.3.1 Asterisk Asterisk Business Edition B.2.2.1 Asterisk Asterisk Business Edition B.2.2.1 Asterisk Asterisk Business Edition B.2.2.0 Asterisk Asterisk Business Edition B.2.2.0 Asterisk Asterisk Business Edition B.1.3.3 Asterisk Asterisk Business Edition B.1.3.2 Asterisk Asterisk Business Edition B Asterisk Asterisk Business Edition A Asterisk Asterisk 1.4.19 .1 Asterisk Asterisk 1.4.19 -rc3 Asterisk Asterisk 1.4.19 Asterisk Asterisk 1.4.18 Asterisk Asterisk 1.4.17 Asterisk Asterisk 1.4.16 Asterisk Asterisk 1.4.15 Asterisk Asterisk 1.4.14 Asterisk Asterisk 1.4.13 Asterisk Asterisk 1.4.12 Asterisk Asterisk 1.4.11 Asterisk Asterisk 1.4.10 Asterisk Asterisk 1.4.9 Asterisk Asterisk 1.4.8 Asterisk Asterisk 1.4.7 Asterisk Asterisk 1.4.6 Asterisk Asterisk 1.4.5 Asterisk Asterisk 1.4.4 Asterisk Asterisk 1.4.3 Asterisk Asterisk 1.4.2 Asterisk Asterisk 1.4.1 Asterisk Asterisk 1.2.29 Asterisk Asterisk 1.2.28 Asterisk Asterisk 1.2.27 Asterisk Asterisk 1.2.27 Asterisk Asterisk 1.2.26 Asterisk Asterisk 1.2.25 Asterisk Asterisk 1.2.24 Asterisk Asterisk 1.2.23 Asterisk Asterisk 1.2.22 Asterisk Asterisk 1.2.21 Asterisk Asterisk 1.2.19 Asterisk Asterisk 1.2.18 Asterisk Asterisk 1.2.17 Asterisk Asterisk 1.2.16 Asterisk Asterisk 1.2.15 Asterisk Asterisk 1.2.14 Asterisk Asterisk 1.2.13 Asterisk Asterisk 1.2.11 Asterisk Asterisk 1.2.11 Asterisk Asterisk 1.2.10 Asterisk Asterisk 1.2.9 Asterisk Asterisk 1.2.8 Asterisk Asterisk 1.2.7 Asterisk Asterisk 1.2.6 Asterisk Asterisk 1.2.5 Asterisk Asterisk 1.2 .0-beta2 Asterisk Asterisk 1.2 .0-beta1 Asterisk Asterisk 1.0.12 Asterisk Asterisk 1.0.11 Asterisk Asterisk 1.0.10 Asterisk Asterisk 1.0.9 Asterisk Asterisk 1.0.8 Asterisk Asterisk 1.0.7 Asterisk Asterisk 1.0.6 Asterisk Asterisk 1.0 Asterisk Asterisk 1.4.18.1 Asterisk Asterisk 1.4 revision 95946 Asterisk Asterisk 1.4 Beta Asterisk Asterisk 1.0.3.4 Asterisk Appliance Developers Kit 0.3 |
| Not Vulnerable: |
Asterisk s800i Appliance 1.2.0.1 Asterisk Asterisk Business Edition C.1.10.3 Asterisk Asterisk Business Edition B.2.5.4 Asterisk Asterisk 1.2.30 Asterisk Asterisk 1.4.21.2 |
Discussion
Asterisk IAX2 Firmware Provisioning Packet Amplification Remote Denial of Service Vulnerability
Asterisk servers may be used to carry out remote denial-of-service attacks. This issue is caused by a flaw in the IAX2 firmware download protocol.
Successful exploits result in packet-amplification attacks. Malicious users can cause Asterisk servers to send large numbers of unwanted firmware packets to arbitrary addresses, potentially denying service to computers and networks because of flooding.
Asterisk servers may be used to carry out remote denial-of-service attacks. This issue is caused by a flaw in the IAX2 firmware download protocol.
Successful exploits result in packet-amplification attacks. Malicious users can cause Asterisk servers to send large numbers of unwanted firmware packets to arbitrary addresses, potentially denying service to computers and networks because of flooding.
Exploit / POC
Asterisk IAX2 Firmware Provisioning Packet Amplification Remote Denial of Service Vulnerability
An attacker may exploit this issue using widely available tools and system utilities.
An attacker may exploit this issue using widely available tools and system utilities.
Solution / Fix
Asterisk IAX2 Firmware Provisioning Packet Amplification Remote Denial of Service Vulnerability
Solution:
The vendor has released an advisory along with updates. Please see the references for more information.
Solution:
The vendor has released an advisory along with updates. Please see the references for more information.
References
Asterisk IAX2 Firmware Provisioning Packet Amplification Remote Denial of Service Vulnerability
References:
References:
- Asterisk Homepage (Asterisk)
- AST-2008-011: Traffic amplification in IAX2 firmware provisioning system ("Asterisk Security Team"
- AST-2008-011 - Traffic amplification in IAX2 firmware provisioning system (Asterisk)