CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
Percentile
98.8%
The Asterisk Development Team has announced security releases for Certified Asterisk 1.8.28, 11.6, and 13.1 and Asterisk 1.8, 11, 12, and 13. The available security releases are released as versions 1.8.28.cert-5, 1.8.32.3, 11.6-cert11, 11.17.1, 12.8.2, 13.1-cert2, and 13.3.2.
These releases are available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk/releases
The release of these versions resolves the following security vulnerability :
AST-2015-003: TLS Certificate Common name NULL byte exploit
When Asterisk registers to a SIP TLS device and and verifies the server, Asterisk will accept signed certificates that match a common name other than the one Asterisk is expecting if the signed certificate has a common name containing a null byte after the portion of the common name that Asterisk expected. This potentially allows for a man in the middle attack.
For more information about the details of this vulnerability, please read security advisory AST-2015-003, which was released at the same time as this announcement.
For a full list of changes in the current releases, please see the ChangeLogs :
http://downloads.asterisk.org/pub/telephony/certified-asterisk/release s/ChangeLog-1.8.28-cert5 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo g-1.8.32.3 http://downloads.asterisk.org/pub/telephony/certified-asterisk/release s/ChangeLog-11.6-cert11 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo g-11.17.1 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo g-12.8.2 http://downloads.asterisk.org/pub/telephony/certified-asterisk/release s/ChangeLog-13.1-cert2 http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo g-13.3.2
The security advisory is available at :
http://downloads.asterisk.org/pub/security/AST-2015-003.
pdfNote that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory 2015-5948.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(84910);
script_version("2.9");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_cve_id("CVE-2015-3008");
script_xref(name:"FEDORA", value:"2015-5948");
script_name(english:"Fedora 22 : asterisk-13.3.2-1.fc22 (2015-5948)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"The Asterisk Development Team has announced security releases for
Certified Asterisk 1.8.28, 11.6, and 13.1 and Asterisk 1.8, 11, 12,
and 13. The available security releases are released as versions
1.8.28.cert-5, 1.8.32.3, 11.6-cert11, 11.17.1, 12.8.2, 13.1-cert2, and
13.3.2.
These releases are available for immediate download at
http://downloads.asterisk.org/pub/telephony/asterisk/releases
The release of these versions resolves the following security
vulnerability :
- AST-2015-003: TLS Certificate Common name NULL byte
exploit
When Asterisk registers to a SIP TLS device and and
verifies the server, Asterisk will accept signed
certificates that match a common name other than the one
Asterisk is expecting if the signed certificate has a
common name containing a null byte after the portion of
the common name that Asterisk expected. This potentially
allows for a man in the middle attack.
For more information about the details of this vulnerability, please
read security advisory AST-2015-003, which was released at the same
time as this announcement.
For a full list of changes in the current releases, please see the
ChangeLogs :
http://downloads.asterisk.org/pub/telephony/certified-asterisk/release
s/ChangeLog-1.8.28-cert5
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo
g-1.8.32.3
http://downloads.asterisk.org/pub/telephony/certified-asterisk/release
s/ChangeLog-11.6-cert11
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo
g-11.17.1
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo
g-12.8.2
http://downloads.asterisk.org/pub/telephony/certified-asterisk/release
s/ChangeLog-13.1-cert2
http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLo
g-13.3.2
The security advisory is available at :
-
http://downloads.asterisk.org/pub/security/AST-2015-003.
pdf
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"http://downloads.asterisk.org/pub/security/AST-2015-003.pdf"
);
# http://downloads.asterisk.org/pub/telephony/asterisk/releases
script_set_attribute(
attribute:"see_also",
value:"http://downloads.asterisk.org/pub/telephony/asterisk/releases/"
);
# http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.32.3
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?85da8028"
);
# http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.17.1
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?9f7655dc"
);
# http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-12.8.2
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?9e407efd"
);
# http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-13.3.2
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?aaf19503"
);
# http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.28-cert5
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?9f561735"
);
# http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.6-cert11
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?de0a6932"
);
# http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-13.1-cert2
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?3362af83"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.redhat.com/show_bug.cgi?id=1210225"
);
# https://lists.fedoraproject.org/pipermail/package-announce/2015-July/162260.html
script_set_attribute(
attribute:"see_also",
value:"http://www.nessus.org/u?ab88120f"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected asterisk package."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:asterisk");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:22");
script_set_attribute(attribute:"patch_publication_date", value:"2015/04/10");
script_set_attribute(attribute:"plugin_publication_date", value:"2015/07/22");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2015-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^22([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 22.x", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC22", reference:"asterisk-13.3.2-1.fc22")) flag++;
if (flag)
{
if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
else security_warning(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "asterisk");
}
Vendor | Product | Version | CPE |
---|---|---|---|
fedoraproject | fedora | asterisk | p-cpe:/a:fedoraproject:fedora:asterisk |
fedoraproject | fedora | 22 | cpe:/o:fedoraproject:fedora:22 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3008
downloads.asterisk.org/pub/security/AST-2015-003.pdf
downloads.asterisk.org/pub/telephony/asterisk/releases/
www.nessus.org/u?3362af83
www.nessus.org/u?85da8028
www.nessus.org/u?9e407efd
www.nessus.org/u?9f561735
www.nessus.org/u?9f7655dc
www.nessus.org/u?aaf19503
www.nessus.org/u?ab88120f
www.nessus.org/u?de0a6932
bugzilla.redhat.com/show_bug.cgi?id=1210225