CVE:CVE-2008-0095
CNNVD:CNNVD-200801-069
Asterisk是一款PBX系统软件，支持SIP、IAX、H323协议。
Asterisk处理带有畸形数据的请求时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。
当Asterisk试图以Also方式传输BYE消息时，由于将数据拷贝到了空指针，因此系统会立即崩溃。如果要利用这个漏洞，攻击者必须首先已经建立了对话。
solution:Upgrade asterisk asterisk_appliance_developer_kit to a higher version than 1.4_revision_95945,and avoid the version (,1.4_revision_95945]; Upgrade asterisk asterisk_business_edition to a higher version than c.1.0beta7,and avoid the version (,c.1.0beta7]; Upgrade asterisk asterisknow to a higher version than beta_6,and avoid the version (,beta_6]; Upgrade asterisk open_source to a higher version than 1.4.16,and avoid the version (,1.4.16]; Upgrade asterisk s800i to a higher version than 1.0.3.3,and avoid the version (,1.0.3.3]