pioneer
超级版主
积分 4563
发帖 4545
注册 2007-7-16
来自 BJ
|
#1 Asterisk "BYE/Also" 拒绝服务
来源
secunia.com
软件名
Asterisk 1.x
Asterisk Appliance Developer Kit 0.x
Asterisk Business Edition 2.x
描述
这可导致恶意拒绝服务
"BYE/Also"转换方法时的空指针被提领错误可导致崩溃应用程序
该漏洞在以下版本中已经报告
* Asterisk Open Source 1.4.x prior to version 1.4.17
* Asterisk Business Edition C.x.x prior to version C.1.0-beta8
* AsteriskNOW pre-release prior to beta7
* Asterisk Appliance Developer Kit prior to Asterisk 1.4 revision 95946
* s800i (Asterisk Appliance) 1.0.x prior to version 1.0.3.4
解决方案
Asterisk Open Source:
更新到 version 1.4.17:
http://downloads.digium.com/pub/telephony/asterisk
Asterisk Business Edition:
version C.1.0中已经修复
AsteriskNOW:
Beta7中已经修复
http://www.asterisknow.org/.
Asterisk Appliance Developer Kit:
更新到 Asterisk 1.4 revision 95946.
s800i (Asterisk Appliance):
更新到version 1.0.3.4.
| |
※文章所有权归【pioneer】与【东方微点论坛】共同所有，转载请注明出处！※
|
 |
|
