CVE-2008-0095

The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference.

• CWE-399

• http://bugs.digium.com/view.php?id=11637Patch
• http://downloads.digium.com/pub/security/AST-2008-001.htmlPatch
• http://secunia.com/advisories/28299
• http://secunia.com/advisories/28312Patch, Vendor Advisory
• http://securityreason.com/securityalert/3520
• http://www.securityfocus.com/archive/1/485727/100/0/threaded
• http://www.securityfocus.com/bid/27110Exploit, Patch
• http://www.securitytracker.com/id?1019152
• http://www.vupen.com/english/advisories/2008/0019
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39361
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00166.html
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00167.html
• http://bugs.digium.com/view.php?id=11637Patch
• http://downloads.digium.com/pub/security/AST-2008-001.htmlPatch
• http://secunia.com/advisories/28299
• http://secunia.com/advisories/28312Patch, Vendor Advisory
• http://securityreason.com/securityalert/3520
• http://www.securityfocus.com/archive/1/485727/100/0/threaded
• http://www.securityfocus.com/bid/27110Exploit, Patch
• http://www.securitytracker.com/id?1019152
• http://www.vupen.com/english/advisories/2008/0019
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39361
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00166.html
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00167.html

Published

Jan 8, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0089SQL injection vulnerability in uprofile.php in ClipShare all…
• CVE-2008-0090A certain ActiveX control in npUpload.dll in DivX Player 6.6…
• CVE-2008-0091Directory traversal vulnerability in download2.php in AGENCY…
• CVE-2008-0092Cross-site scripting (XSS) vulnerability in index.php in the…
• CVE-2008-0093Multiple cross-site scripting (XSS) vulnerabilities in newti…
• CVE-2008-0094Multiple directory traversal vulnerabilities in MODx Content…
• CVE-2008-0096Multiple buffer overflows in Georgia SoftWorks SSH2 Server (…
• CVE-2008-0097Format string vulnerability in the log function in Georgia S…
• CVE-2008-0098Buffer overflow in RealPlayer 11 build 6.0.14.748 allows rem…
• CVE-2008-0099Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 an…
• CVE-2008-0100Stack-based buffer overflow in the Scene::errorf function in…
• CVE-2008-0101Format string vulnerability in the swDebugf function in Dune…