Lucene search
HistoryJan 13, 2006 - 11:03 a.m.
CVE-2006-0189
cve-2006-0189
buffer overflow
estara softphone
remote code execution
sip packet
udp port 5060
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.207 Low
EPSS
Percentile
96.4%
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka “a”) field in the SDP data of a SIP packet on UDP port 5060.
Affected configurations
Node
estarasoftphoneMatch3.0.1.14
ORestarasoftphoneMatch3.0.1.46
| CPE | Name | Operator | Version |
|---|---|---|---|
| estara:softphone | estara softphone | eq | 3.0.1.14 |
| estara:softphone | estara softphone | eq | 3.0.1.46 |
References
Social References
More
Related
nessus
nessus
eStara SoftPhone SIP Packet SDP Data attribute Field Overflow
2006-02-22 00:00:00
prion
prion
Buffer overflow
2006-01-13 11:03:00
cvelist
cvelist
CVE-2006-0189
2006-01-13 11:00:00
nvd
nvd
CVE-2006-0189
2006-01-13 11:03:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.207 Low
EPSS
Percentile
96.4%
Related for CVE-2006-0189