CVE-2015-3008 Security feature bypass in n/a
Man-in-the-middle attackers can spoof SSL servers via crafted certificates due to improper null byte handling in SIP TLS registration.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-3008?
CVE-2015-3008 is a medium-severity vulnerability in Digium Asterisk, published on 10 Apr 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified Asterisk 1.8.28 before 1.8.28-cert5, 11.6 before 11.6-cert11, and 13.1 before 13.1-cert2, when registering a SIP TLS device, does not properly handle a null byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
Weakness: CWE-310
Which versions are affected by CVE-2015-3008?
It affects 2 products.
Products include Digium Asterisk, Digium Certified Asterisk.
How do I fix CVE-2015-3008?
Upgrade to a fixed version.
Is CVE-2015-3008 being exploited?
There is no known exploitation of CVE-2015-3008 in the wild and no public exploit code.
Other vulnerabilities in Digium Asterisk
Sources
Also known as DEBIAN-CVE-2015-3008, GHSA-j3c8-xv8h-h8mv, MGASA-2015-0153, UBUNTU-CVE-2015-3008.