DEBIAN-CVE-2008-1959

Stack-based buffer overflow in the getremotevideoportmedia function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SIP message. NOTE: some of these details are obtained from third party information...

CVE-2008-1959

CVE-2008-1959: SIPp 3.0 contains a stack-based buffer overflow in get_remote_video_port_media (call.cpp) that can be triggered by a crafted SIP message, leading to denial of service and possible remote code execution. The Red Hat and Fedora advisories confirm the issue and note updates for sipp p...

SIPp call.cpp文件远程栈溢出漏洞

BUGTRAQ ID: 28884 SIPp是免费的开源SIP协议测试工具和通讯生成器。 SIPp的call.cpp文件中的getremotevideoportmedia函数存在栈溢出漏洞，如果远程攻击者向SIPp发送了特制的SIP消息的话，就可以触发这个溢出，导致执行任意指令。 SIPp 3.0 SIPp ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://sourceforge.net/project/shownotes.php?releaseid=593806&groupid=104305...

openSUSE 10 Security Update : asterisk (asterisk-5169)

A remote attacker could do a call without prior login via the SIP channel. CVE-2008-1332 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update asterisk-5169. The text description of this plugin is C...

GLSA-200804-13 : Asterisk: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-13 Asterisk: Multiple vulnerabilities Asterisk upstream developers reported multiple vulnerabilities: The Call Detail Record Postgres logging engine cdrpgsql does not correctly escape the ANI and DNIS arguments before using...

Asterisk: Multiple vulnerabilities

Background Asterisk is an open source telephony engine and tool kit. Description Asterisk upstream developers reported multiple vulnerabilities: The Call Detail Record Postgres logging engine cdrpgsql does not correctly escape the ANI and DNIS arguments before using them in SQL statements...

Cisco IOS双栈路由器IPv6拒绝服务漏洞

BUGTRAQ ID: 28461 CVECAN ID: CVE-2008-1153 Cisco IOS是思科网络设备中所使用的互联网操作系统。 运行Cisco IOS软件的设备如果启用了IPv6，就会受拒绝服务攻击影响。设备必须还要启用了IPv4 UDP服务才会受这个漏洞影响。如果要利用这个漏洞，攻击IPv6报文必须指向设备，通过路由器路由的报文不会触发这个漏洞。成功利用这个漏洞可能导致以下情况之一： 1. 如果接口上配置了RSVP服务则设备会崩溃。 2. 任何其他受影响的基于IPv4 UDP的服务会导致接口无法接收更多的通讯，仅有利用漏洞端口才会受影响。...

Debian Security Advisory DSA 1525-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1525-1. OpenVAS Vulnerability Test $Id: deb15251.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1525-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Fedora 7 : asterisk-1.4.18.1-1.fc7 (2008-2620)

Update to 1.4.18.1 plus another patch to fix some security issues. AST-2008-002 details two buffer overflows that were discovered in RTP codec payload type handling. http://downloads.digium.com/pub/security/AST-2008-002.pdf All users of SIP in Asterisk 1.4 and 1.6 are affected. AST-2008-003 detai...

Fedora 8 : asterisk-1.4.18.1-1.fc8 (2008-2554)

Update to 1.4.18.1 plus another patch to fix some security issues. AST-2008-002 details two buffer overflows that were discovered in RTP codec payload type handling. http://downloads.digium.com/pub/security/AST-2008-002.pdf All users of SIP in Asterisk 1.4 and 1.6 are affected. AST-2008-003 detai...

Asterisk multiple security vulnerabilities

Multiple format string vulnerabilities, buffer overflow on RTP handling, HTTP interface sessions spoofing, unauthorized SIP calls...

Debian DSA-1525-1 : asterisk - several vulnerabilities

Several remote vulnerabilities have been discovered in Asterisk, a free software PBX and telephony toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6430 Tilghman Lesher discovered that database-based registrations are insufficiently validate...

Asterisk绕过呼叫认证漏洞

BUGTRAQ ID: 28310 CVECAN ID: CVE-2008-1332 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk在处理呼叫选项时存在漏洞，远程攻击者可能利用此漏洞执行非授权操作。 远程攻击者可以通过SIP通道驱动使用无效的From头执行非授权呼叫，这种操作类似于SIP配置选项allowguest=yes，也就是带有特制From头的呼叫会发送给sip.conf的通用部分所指定环境中的PBX。 Asterisk Asterisk 1.4.x Asterisk Asterisk 1.2.x Asterisk Asterisk 1.0....

[Full-disclosure] [MU-200803-01] Multiple buffer overflows in Asterisk

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple buffer overflows in Asterisk MU-200803-01 March 18, 2008 http://labs.musecurity.com/advisories.html Affected Products/Versions: Asterisk 1.4.18 and other branches http://www.asterisk.org/node/48466 Product Overview: Asterisk is an open source...

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...

Code injection

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...