[Full-disclosure] Asterisk SDP DOS vulnerability

MADYNES Security Advisory http://madynes.loria.fr/ http://madynes.loria.fr Title: Asterisk SIP INVITE remote DOS Release Date: 08/03/2007 Severity: High - Denial of Service Advisory ID:KIPH1 Software: Asterisk http://www.asterisk.org/ http://www.asterisk.org/ AsteriskR is a complete IP PBX in...

SUSE-SA:2006:069: asterisk

The remote host is missing the patch for the advisory SUSE-SA:2006:069 asterisk. Two security problem have been found and fixed in the PBX software Asterisk. CVE-2006-5444: Integer overflow in the getinput function in the Skinny channel driver chanskinny.c as used by Cisco SCCP phones, allows...

Asterisk存在多个安全漏洞

Asterisk是一款开放源代码的PBX系统。 Asterisk MGCP实现存在远程堆栈缓冲区溢出，远程攻击者可以利用漏洞以进程权限执行任意指令。 攻击者可以通过使用畸形AUEP audit endpoint应答消息来触发。 另一个问题是存在于处理发送给Record函数的文件名，通过格式串攻击可导致任意代码执行，或者通过目录遍历攻击可导致任意文件覆盖。不过这个漏洞需要管理员使用客户端控制的变量作为文件名的一部分。 Asterisk Asterisk 1.2.10 Asterisk Asterisk 1.2.9 Asterisk Asterisk 1.2.8 Asterisk...

[Full-disclosure] Asterisk Local and Remote Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: Asterisk Open Source PBX Impact: Multiple Local and Remote Denials of Service Versions: All versions prior to 1.2.13 Author: Jesus Oquendo echo @infiltrated|sed 's/^/sil/g;s/$/.net/g' I. BACKGROUND Asterisk is an Open Source PBX which runs on...

Asterisk chan_skinny远程缓冲区溢出漏洞

Asterisk是一款PBX系统的软件，运行在Linux系统上，支持使用SIP、IAX、H323协议进行IP通话。 Asterisk的chanskinny.c文件中的static int getinputstruct skinnysession s函数没有正确地验证报文头中用户所提供的长度。远程攻击者可以通过发送特制报文来触发缓冲区溢出漏洞，导致执行任意指令。 asterisk-1.2.12.1/channels/chanskinny.c的2860-2870中的漏洞代码： ---------------- res = reads-fd, s-inbuf, 4; // - integer...

Skinny Server Detection

The remote server is an H.323 proxy that understands the Skinny protocol, also known as SCCP, for 'Skinny Client Control Protocol'. Skinny is Cisco's proprietary lightweight terminal control protocol used by some VoIP phones to communicate with Cisco CallManager or Asterisk PBX systems. C Tenable...

Asteriks PBX / VoIP solution buffer overflow

Buffer overflow in MGCP inplementation on AUEP message parsing...

Current Versions Release History

Current Versions Release History 5.1c2 30-Jun-06 Valid Core License Keys: issued between 01-Jun-2004 and 31-Oct-2004, or on or after 01-Jun-2005. Admin: Lawful Intercept for Signals is implemented. WSSP: now all string prefixes HTML, JAVASCRIPT, etc. support numeric data. XIMSS: the Signal...

Asterisk IAX2 VoIP PBX and multiple IAX clients DoS

DoS on IAX2 channel processing...

CORE-2006-0330: Asterisk PBX truncated video frame vulnerability

Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ Asterisk PBX truncated video miniframe vulnerability Date Published: 2006-06-09 Last Update: 2006-06-09 Advisory ID: CORE-2006-0330 Bugtraq ID: 18295 CVE Name: CVE-2006-2898 Title: Asterisk PBX truncated video...

: Asterisk PBX truncated video frame vulnerability

Advisory ID Internal CORE-2006-0330 Date Published : 2006-06-09 Last Update : 2006-06-09 Advisory ID : CORE-2006-0330 Bugtraq ID : 18295 CVE Name : CVE-2006-2898 Title : Asterisk PBX truncated video frame vulnerability Class : Input Validation Error Remotely Exploitable : Yes Locally Exploitable ...

Asterisk Recording Interface (ARI) includes/main.conf Remote Credential Disclosure

The remote host is running Asterisk Recording Interface ARI, a web-based portal for the Asterisk PBX software. The version of ARI installed on the remote host allows an unauthenticated attacker to view its configuration file, which contains sensitive information such as passwords. %NASLMINLEVEL...

Asterisk Recording Interface (ARI) misc/audio.php recording Parameter Traversal Arbitrary File Access

The remote host is running Asterisk Recording Interface ARI, a web-based portal for the Asterisk PBX software. The version of ARI installed on the remote host reportedly allows an unauthenticated attacker to retrieve arbitrary sound files, such as voicemail messages, and to determine the existenc...

Inter-Asterisk eXchange Protocol Detection

The remote system is running a server that speaks the Inter-Asterisk eXchange Protocol. Description : The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP Telephony clients/servers to enable voice communication between them. OpenVAS Vulnerability Test $Id:...

Inter-Asterisk eXchange Protocol Detection

The remote system is running a server that speaks the Inter-Asterisk eXchange Protocol. Description : The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP Telephony clients/servers to enable voice communication between them. SPDX-FileCopyrightText: 2006 Ferdy...

Inter-Asterisk eXchange Protocol Detection

The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP telephony clients/servers to enable voice communication between them. Script Written By Ferdy Riphagen Script distributed under the GNU GPLv2 License. include"compat.inc"; if description scriptid20834;...

Asterisk PBX server voice mail mailbox directory traversal

Web interface directory traversal allows to download any .wav file...

Asterisk VOIP PBX software buffer overflow

Stack overflow on CLi commands processing...

Asterisk PBX 0.7.x - Multiple Logging Format String Vulnerabilities

Asterisk PBX 0.7.x - Multiple Logging Format String Vulnerabilities source: https://www.securityfocus.com/bid/10569/info It is reported that Asterisk is susceptible to format string vulnerabilities in its logging functions. An attacker may use these vulnerabilities to corrupt memory, and read or...

Security BugWare : Alcatel 4400 PBX hack

w w w . s e c u r i t y b u g w a r e . o r g A D V I S O R Y Playing around with ALCATEL 4400 PBX SYSTEM AFFECTED ================ Alcatel 4400 Pbx PROBLEM ======== A little audit of an Alcatel 4400 pbx leads us to some interesting bugs : default passwords, many root accesses, DoS, halt. If you...