Design/Logic Flaw

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

CVE-2007-4103

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

CVE-2007-4103

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

CVE-2007-4103

The CVE-2007-4103 issue affects the IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x (pre-1.2.23), Asterisk Open 1.4.x (pre-1.4.9), and Asterisk Appliance Developer Kit (pre-0.6.0). When configured to allow unauthenticated calls, remote attackers can cause denial of service by flooding call...

Asterisk < 1.2.22 1.4.8 IAX2 channel driver Remote Crash Exploit

No description provided by source. !/usr/bin/env ruby author = tenkeiev Script to test chaniax for the vuln in ASA-2007-015 Trigger subtypes of 11 or 12 will crash an unpatched server First establish a call - send new, recv accept, send ack, recv answer, send ack Then send IAX2 control packets wi...

Asterisk 1.2.221.4.8 - IAX2 Channel Driver Remote Crash

Asterisk 1.2.221.4.8 - IAX2 Channel Driver Remote Crash !/usr/bin/env ruby author = tenkeiev Script to test chaniax for the vuln in ASA-2007-015 Trigger subtypes of 11 or 12 will crash an unpatched server First establish a call - send new, recv accept, send ack, recv answer, send ack Then send IA...

Asterisk < 1.2.22, 1.4.8 IAX2 channel driver Remote Crash Exploit

Exploit for multiple platform in category dos / poc ================================================================= Asterisk \r\n" exit -1 else hostname = ARGV0 ifARGV10,2 == '0x' || ARGV10,2 == '0X' triggersubtype = ARGV1.hex else triggersubtype = ARGV1.toi end end t = UDPSocket.new...

Asterisk < 1.2.22/1.4.8 - IAX2 Channel Driver Remote Crash

!/usr/bin/env ruby author = tenkeiev Script to test chaniax for the vuln in ASA-2007-015 Trigger subtypes of 11 or 12 will crash an unpatched server First establish a call - send new, recv accept, send ack, recv answer, send ack Then send IAX2 control packets with subtypes 0x0b or 0x0c that conta...

Asterisk VoIP server IAX2 DoS

NEW requests flood causes resources exhaustion...

[Full-disclosure] ASA-2007-018: Resource exhaustion vulnerability in IAX2 channel driver

Asterisk Project Security Advisory - ASA-2007-018 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Resource Exhaustion vulnerability in IAX2 channel | | | driver...

Asterisk IAX2隧道驱动IAX2_Write函数远程栈溢出漏洞

BUGTRAQ ID: 24949 CVECAN ID: CVE-2007-3762 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk IAX2隧道驱动（chaniax2）中存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向chaniax2传送了数据负载大于4 kB的RTP帧的话，就可能触发这个漏洞。如果要触发这个漏洞，调用iax2write的帧应满足以下条件： 语音或视频帧 4字节的时间戳与之前所发送帧高2字节相同 格式为预期格式 数据负载大于4kB...

Asterisk多个远程拒绝服务漏洞

BUGTRAQ ID: 24950 CVECAN ID: CVE-2007-3763,CVE-2007-3764,CVE-2007-3765 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk...

Asterisk VoIP server multiple security vulnerabilities

Buffer overflow and DoS on IAX2 implementation, DoS in Skinny and STUN implementation...

ASA-2007-015: Remote Crash Vulnerability in IAX2 channel driver

Asterisk Project Security Advisory - ASA-2007-015 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote Crash Vulnerability in IAX2 channel driver |...

ASA-2007-014: Stack buffer overflow in IAX2 channel driver

Asterisk Project Security Advisory - ASA-2007-014 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Stack buffer overflow in IAX2 channel driver |...

Stack overflow

Stack-based buffer overflow in the IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a...

CVE-2007-3762

Stack-based buffer overflow in the IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a...

Null pointer dereference

The IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted 1 LAGRQ or 2 LAGRP...

DEBIAN-CVE-2007-3762

Stack-based buffer overflow in the IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a...

CVE-2007-3763

The IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted 1 LAGRQ or 2 LAGRP...