ID de Prueba:	1.3.6.1.4.1.25623.1.0.110018
Categoría:	Denial of Service
Título:	Asterisk SIP Channel Driver DoS Vulnerability
Resumen:	Asterisk is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Asterisk is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, alLows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an associated channel. Solution: Update to version 1.8.11.1 / 10.3.1 / C.3.7.4 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2416 BugTraq ID: 53205 http://www.securityfocus.com/bid/53205 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079759.html https://issues.asterisk.org/jira/browse/ASTERISK-19770 http://osvdb.org/81456 http://www.securitytracker.com/id?1026963 http://secunia.com/advisories/48891 XForce ISS Database: asterisk-sipupdate-dos(75101) https://exchange.xforce.ibmcloud.com/vulnerabilities/75101
Copyright	Copyright (C) 2012 NopSec Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.