CVE-2008-1390
Published Mar 24, 2008
Last updated 6 years ago
Overview
- Description
- The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it easier for remote attackers to hijack a manager session via a series of ID guesses.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-255
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "593AA737-5AF3-4F7C-B74B-D3F37701C435"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D942B911-979A-4AC3-93D6-07E420171E77"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84CB8C4A-F001-4DD7-8DFE-CB082B4BB969"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96DB0240-E93D-4BDB-859B-B44C91996993"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F4BA849-E092-404A-92CD-44C2D99AE971"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C7014B4-1860-49AD-9469-9954C3CC01C0"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D1F0056-0945-476C-982E-7B41EB420A99"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A53DEC9D-B288-42CD-9387-57315AC98D72"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89C1F33F-27B6-4C56-92FF-EB2861ABBC22"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64E07CF3-073D-4705-96A6-13367D4F5CAA"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18D19CB0-E3D7-40DB-B0C0-B62BB6075267"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77FB7CC1-BD0D-4F34-AB21-59CFD23C494C"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "997FA3C7-1894-478A-ABF1-52DD2B0487E1"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96E02BE0-BF4A-46C9-AFB5-47E8F18E3D17"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "292190EE-D9C8-4E3A-BB34-0ECD7B865482"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DAC55F9-1D43-4AA8-87C9-DB165442700B"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "195B012E-0538-4140-9035-F5D1A442778B"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4.18.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78AC03A7-41AB-45AF-AD89-291A7429B8A0"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4_beta:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "181C8E98-2138-4BFC-B6B0-1DA270AEE7F6"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.4_revision_95946:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB08F4FA-8600-4D21-A565-B3BF636634B4"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FEAE6729-D79A-49B8-9758-BA74A60A238A"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C05B437-C292-4AA0-8AFE-1CA07CD80034"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0102C4C0-1A7D-4AB7-9817-44E6B0DB761E"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81DDF486-4185-48EE-869E-0AA6726C31F7"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF45A8E1-F6B1-42BD-9168-12062FA6EAEA"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5757B9B-2759-439A-9A6D-CCDD6C8C8940"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCD71268-EAA2-477B-8AC4-DE4853A262B8"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "529B2115-A191-4F3F-8F8C-A38B7C45463A"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E2D0508-C418-48CE-BF83-39F893688D1C"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BC80EBD-14D3-44A6-A06F-0549722E0EFA"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7859797F-E9AD-4429-BD2C-A24EC24A5D03"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisknow:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC6FE17C-3B08-4675-9F73-5DC0C2438BB1"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisknow:beta_5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B12A09BE-1EE0-46D5-B3F0-E8847409A49A"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisknow:beta_6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A5A734E-1DD3-4924-8AC1-97048FA3270F"
},
{
"criteria": "cpe:2.3:a:asterisk:asterisknow:beta_7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AE2F09E-4B5A-4EDF-A48A-BCBBAA80156B"
},
{
"criteria": "cpe:2.3:a:asterisk:s800i:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C3A0A08-4107-4B8B-AE7E-DC23849A54DC"
},
{
"criteria": "cpe:2.3:a:asterisk:s800i:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9320928D-D83C-4258-AF62-AB2D1F50D972"
},
{
"criteria": "cpe:2.3:a:asterisk:s800i:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "569084D1-977D-41FC-A444-0B3F5199DDD3"
},
{
"criteria": "cpe:2.3:a:asterisk:s800i:1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02D182FB-761C-4F08-A776-B613FAC55230"
},
{
"criteria": "cpe:2.3:a:asterisk:s800i:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7B5EDAB-61DD-4864-A159-39292D339DA2"
}
],
"operator": "OR"
}
]
}
]