The remote host is affected by the vulnerability described in GLSA-200804-13 (Asterisk: Multiple vulnerabilities)

    Asterisk upstream developers reported multiple vulnerabilities:
    The Call Detail Record Postgres logging engine (cdr_pgsql)     does not correctly escape the ANI and DNIS arguments before using them     in SQL statements (CVE-2007-6170).
    When using database-based     registrations ('realtime') and host-based authentication, Asterisk does     not check the IP address when the username is correct and there is no     password provided (CVE-2007-6430).
    The SIP channel driver does     not correctly determine if authentication is required     (CVE-2008-1332).
  Impact :

    Remote authenticated attackers could send specially crafted data to     Asterisk to execute arbitrary SQL commands and compromise the     administrative database. Remote unauthenticated attackers could bypass     authentication using a valid username to hijack other user's sessions,     and establish sessions on the SIP channel without authentication.
  Workaround :

    There is no known workaround at this time.

リモートホストで実行されているバージョンのAsteriskでは、SIPチャネルドライバーを通じて、認証されていない呼び出しが可能です。特別に細工されたFromヘッダーを使用して、リモート攻撃者が認証をバイパスし、「sip.conf」の「general」セクションで指定されたコンテキストに呼び出しを行う可能性があります。

遠端主機上執行的 Asterisk 版本允許透過 SIP 通道驅動程式進行未經驗證的呼叫。遠端攻擊者可使用特製的「From」標頭來繞過驗證，並呼叫「sip.conf」的「general」區段中指定的內容。

远程主机上运行的 Asterisk 版本允许在未经身份验证的情况下通过 SIP 通道驱动程序进行调用。使用特别构建的 From 标头，远程攻击者可绕过身份验证并调用“sip.conf”的“general”部分中指定的环境。

A remote attacker could do a call without prior login via the SIP channel. (CVE-2008-1332)

Several remote vulnerabilities have been discovered in Asterisk, a free software PBX and telephony toolkit. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-6430     Tilghman Lesher discovered that database-based     registrations are insufficiently validated. This only     affects setups, which are configured to run without a     password and only host-based authentication.

  - CVE-2008-1332     Jason Parker discovered that insufficient validation of     From: headers inside the SIP channel driver may lead to     authentication bypass and the potential external     initiation of calls.

  - CVE-2008-1333     This update also fixes a format string vulnerability,     which can only be triggered through configuration files     under control of the local administrator. In later     releases of Asterisk this issue is remotely exploitable     and tracked as CVE-2008-1333.

The status of the old stable distribution (sarge) is currently being investigated. If affected, an update will be released through security.debian.org.

Update to 1.4.18.1 plus another patch to fix some security issues.
AST-2008-002 details two buffer overflows that were discovered in RTP codec payload type handling. * http://downloads.digium.com/pub/security/AST-2008-002.pdf * All users of SIP in Asterisk 1.4 and 1.6 are affected. AST-2008-003 details a vulnerability which allows an attacker to bypass SIP authentication and to make a call into the context specified in the general section of sip.conf. * http://downloads.digium.com/pub/security/AST-2008-003.pdf * All users of SIP in Asterisk 1.0, 1.2, 1.4, or 1.6 are affected. AST-2008-005 details a problem in the way manager IDs are calculated. * http://downloads.digium.com/pub/security/AST-2008-005.pdf

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Asterisk running on the remote host allows unauthenticated calls via the SIP channel driver.  Using a specially crafted From header, a remote attacker can bypass authentication and make calls into the context specified in the 'general' section of 'sip.conf'.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
31960	GLSA-200804-13 : Asterisk: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/4/17	2021/1/6	high
32135	Asterisk SIPのリモート認証バイパス	Nessus	Misc.	2008/5/7	2022/4/11	medium
32135	Asterisk SIP 遠端驗證繞過	Nessus	Misc.	2008/5/7	2022/4/11	medium
32135	Asterisk SIP 远程认证绕过	Nessus	Misc.	2008/5/7	2022/4/11	medium
31963	openSUSE 10 Security Update : asterisk (asterisk-5169)	Nessus	SuSE Local Security Checks	2008/4/17	2021/1/14	high
31631	Debian DSA-1525-1 : asterisk - several vulnerabilities	Nessus	Debian Local Security Checks	2008/3/21	2021/1/4	high
31664	Fedora 8 : asterisk-1.4.18.1-1.fc8 (2008-2554)	Nessus	Fedora Local Security Checks	2008/3/26	2021/1/11	high
31667	Fedora 7 : asterisk-1.4.18.1-1.fc7 (2008-2620)	Nessus	Fedora Local Security Checks	2008/3/26	2021/1/11	high
32135	Asterisk SIP Remote Authentication Bypass	Nessus	Misc.	2008/5/7	2022/4/11	medium

検出

プラグインの検索

high

medium

medium

medium

high

high

high

high

medium