Test ID:	1.3.6.1.4.1.25623.1.0.110018
Category:	Denial of Service
Title:	Asterisk SIP Channel Driver DoS Vulnerability
Summary:	Asterisk is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Asterisk is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, alLows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an associated channel. Solution: Update to version 1.8.11.1 / 10.3.1 / C.3.7.4 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2416 BugTraq ID: 53205 http://www.securityfocus.com/bid/53205 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079759.html https://issues.asterisk.org/jira/browse/ASTERISK-19770 http://osvdb.org/81456 http://www.securitytracker.com/id?1026963 http://secunia.com/advisories/48891 XForce ISS Database: asterisk-sipupdate-dos(75101) https://exchange.xforce.ibmcloud.com/vulnerabilities/75101
Copyright	Copyright (C) 2012 NopSec Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.