ID de Prueba:	1.3.6.1.4.1.25623.1.0.900851
Categoría:	Denial of Service
Título:	Asterisk IAX2 Call Number Exhaustion DOS Vulnerability (AST-2009-006)
Resumen:	Asterisk is prone to a denial of service (DoS); vulnerability.
Descripción:	Summary: Asterisk is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: An error in the 'IAX2' protocol implementation while processing call-number which can be exploited by initiating many IAX2 message exchanges. Vulnerability Impact: Successful exploitation will let the attacker cause to denial of service. Affected Software/OS: Asterisk version 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6 on Linux. Solution: Upgrade to version 1.2.35, 1.4.26.2, 1.6.0.15, 1.6.1.6 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2346 BugTraq ID: 36275 http://www.securityfocus.com/bid/36275 Bugtraq: 20090903 AST-2009-006: IAX2 Call Number Resource Exhaustion (Google Search) http://www.securityfocus.com/archive/1/506257/100/0/threaded http://securitytracker.com/id?1022819 http://secunia.com/advisories/36593
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.