What’s Vulnerable › Vulnerabilities

CVE-2008-1332

• Severity: high (CVSS 8.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-03-20 · updated 2026-06-16
• Weakness: CWE-264

Description

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header.

Affected products

• Asterisk: a, b.1.3.2, b.1.3.3, b.2.2.0, b.2.2.1, b.2.3.1 (+9)
• Asterisk Appliance Developer Kit: through 1.4; 0.2, 0.3, 0.4, 0.5, 0.6, 0.6.0 (+3)
• Asterisk Business Edition: through a; through b.2.5.0; through c.1.6.1
• Asterisknow: through 1.0.1; 1.0
• asterisk Open Source: through 1.2.26; through 1.4.17; through 1.4.19; 1.0, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.3.4 (+63)
• asterisk S800I: through 1.1.0.1; 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.3.3, 1.1.0

References

• http://downloads.digium.com/pub/security/AST-2008-003.html
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
• http://secunia.com/advisories/29426
• http://secunia.com/advisories/29456
• http://secunia.com/advisories/29470
• http://secunia.com/advisories/29782
• http://secunia.com/advisories/29957
• http://security.gentoo.org/glsa/glsa-200804-13.xml
• http://securitytracker.com/id?1019629
• http://www.asterisk.org/node/48466
• http://www.debian.org/security/2008/dsa-1525
• http://www.securityfocus.com/archive/1/489818/100/0/threaded

Get alerted when CVE-2008-1332 or the next vulnerability affects your stack