Irontec Sngrep 缓冲区错误漏洞

Irontec Sngrep is a tool from Irontec for displaying SIP call message streams from endpoints. A security vulnerability exists in Irontec Sngrep versions v0.4.2 through v1.8.1, which stems from the functions sipgetcallid and sipgetxcallid in sip.c using the strncpy function to copy the contents of...