标题: Asterisk "BYE/Also" 拒绝服务 [打印本页]

---

作者: pioneer     时间: 2008-1-8 09:41    标题: Asterisk "BYE/Also" 拒绝服务

来源

secunia.com

软件名

Asterisk 1.x
Asterisk Appliance Developer Kit 0.x
Asterisk Business Edition 2.x

描述

这可导致恶意拒绝服务
"BYE/Also"转换方法时的空指针被提领错误可导致崩溃应用程序

该漏洞在以下版本中已经报告
* Asterisk Open Source 1.4.x prior to version 1.4.17
* Asterisk Business Edition C.x.x prior to version C.1.0-beta8
* AsteriskNOW pre-release prior to beta7
* Asterisk Appliance Developer Kit prior to Asterisk 1.4 revision 95946
* s800i (Asterisk Appliance) 1.0.x prior to version 1.0.3.4

解决方案

Asterisk Open Source:
更新到 version 1.4.17:
http://downloads.digium.com/pub/telephony/asterisk

Asterisk Business Edition:
version C.1.0中已经修复

AsteriskNOW:
Beta7中已经修复
http://www.asterisknow.org/.

Asterisk Appliance Developer Kit:
更新到 Asterisk 1.4 revision 95946.

s800i (Asterisk Appliance):
更新到version 1.0.3.4.

---

欢迎光临 微点交流论坛 (http://bbs.micropoint.com.cn/)

bbs.micropoint.com.cn