This script is Copyright (C) 2012-2016 Tenable Network Security, Inc.
A telephony application running on the remote host is affected by a
buffer overflow vulnerability.
According to the version in its SIP banner, the version of Asterisk
running on the remote host is potentially affected by a vulnerability
that could allow a remote attacker to crash the server, or possibly
inject arbitrary code by sending an arbitrarily long string value for
HTTP Digest Authentication.
See also :
Upgrade to Asterisk 220.127.116.11 / 10.2.1 or apply the patches listed in
the Asterisk advisory.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 7.8
Public Exploit Available : true