CVE:CVE-2008-1332
CNNVD:CNNVD-200803-316
Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。
Asterisk在处理呼叫选项时存在漏洞，远程攻击者可能利用此漏洞执行非授权操作。
远程攻击者可以通过SIP通道驱动使用无效的From头执行非授权呼叫，这种操作类似于SIP配置选项allowguest=yes，也就是带有特制From头的呼叫会发送给sip.conf的通用部分所指定环境中的PBX。
solution:Upgrade asterisk asterisk to a higher version than a,b.1.3.2,b.1.3.3,b.2.2.0,b.2.2.1,b.2.3.1,b.2.3.2,b.2.3.3,b.2.3.4,b.2.3.5,b.2.3.6,c.1.0_beta7,c.1.0_beta8,c.1.6,c.1.6.1,and avoid the version a,b.1.3.2,b.1.3.3,b.2.2.0,b.2.2.1,b.2.3.1,b.2.3.2,b.2.3.3,b.2.3.4,b.2.3.5,b.2.3.6,c.1.0_beta7,c.1.0_beta8,c.1.6,c.1.6.1; Upgrade asterisk asterisk_appliance_developer_kit to a higher version than 1.4,0.2,0.3,0.4,0.5,0.6,0.6.0,0.7,0.8,1.3,and avoid the version (,1.4],0.2,0.3,0.4,0.5,0.6,0.6.0,0.7,0.8,1.3; Upgrade asterisk asterisk_business_edition to a higher version than a,b.2.5.0,c.1.6.1,and avoid the version (,a],(,b.2.5.0],(,c.1.6.1]; Upgrade asterisk asterisknow to a higher version than 1.0.1,1.0,and avoid the version (,1.0.1],1.0; Upgrade asterisk open_source to a higher version than 1.2.26,1.4.17,*:rc-2,1.0,1.0.0,1.0.1,1.0.2,1.0.3,1.0.3.4,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.11,1.0.11.1,1.0.12,1.2.0,1.2.0:beta1,1.2.0:beta2,1.2.0:rc1,1.2.0beta2,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.7.1,1.2.8,1.2.9,1.2.9.1,1.2.10,1.2.11,1.2.12,1.2.12.1,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.21.1,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26.1,1.2.26.2,1.4.0,1.4.0:beta2,1.4.0:beta3,1.4.0:beta4,1.4.1,1.4.10,1.4.10.1,1.4.11,1.4.12,1.4.12.1,1.4.13,1.4.14,1.4.15,1.4.16,1.4.16.1,1.4.16.2,1.4.18,1.4.19:rc3,and avoid the version (,1.2.26],(,1.4.17],*:rc-2,1.0,1.0.0,1.0.1,1.0.2,1.0.3,1.0.3.4,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.11,1.0.11.1,1.0.12,1.2.0,1.2.0:beta1,1.2.0:beta2,1.2.0:rc1,1.2.0beta2,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.7.1,1.2.8,1.2.9,1.2.9.1,1.2.10,1.2.11,1.2.12,1.2.12.1,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.21.1,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26.1,1.2.26.2,1.4.0,1.4.0:beta2,1.4.0:beta3,1.4.0:beta4,1.4.1,1.4.10,1.4.10.1,1.4.11,1.4.12,1.4.12.1,1.4.13,1.4.14,1.4.15,1.4.16,1.4.16.1,1.4.16.2,1.4.18,1.4.19:rc3; Upgrade asterisk s800i to a higher version than 1.1.0.1,1.0,1.0.1,1.0.2,1.0.3,1.0.3.3,1.1.0,and avoid the version (,1.1.0.1],1.0,1.0.1,1.0.2,1.0.3,1.0.3.3,1.1.0