3558 matches found
PT-2009-5109 · Digium · Asterisk Open Source +2
Name of the Vulnerable Software and Affected Versions: Asterisk Open Source versions 1.2.x through 1.2.33 Asterisk Open Source versions 1.4.x through 1.4.26 Asterisk Open Source versions 1.6.0.x through 1.6.0.11 Asterisk Open Source versions 1.6.1.x through 1.6.1.3 Asterisk Business Edition A.x.x...
AST-2009-005: Remote Crash Vulnerability in SIP channel driver
Asterisk Project Security Advisory - AST-2009-005 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...
Asterisk PBX Detection (SIP)
SIP based detection of Asterisk PBX. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900811";...
Asterisk RTP Text Frames DoS Vulnerability (AST-2009-004)
Asterisk is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...
Asterisk DoS
Crash on RTP text frames processing...
AST-2009-004: Remote Crash Vulnerability in RTP stack
Asterisk Project Security Advisory - AST-2009-004 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Remote Crash Vulnerability in RTP stack |...
CVE-2009-2651
main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...
CVE-2009-2651
main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...
Null pointer dereference
main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...
DEBIAN-CVE-2009-2651
main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...
CVE-2009-2651
main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...
CVE-2009-2651
main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...
CVE-2009-2651
CVE-2009-2651 affects Asterisk Open Source 1.6.1 up to, but not including, 1.6.1.2. A remote attacker can trigger a Denial of Service by sending an RTP text frame without a required delimiter, causing a NULL pointer dereference and an invalid pointer calculation. The issue is mitigated by upgradi...
CVE-2009-2651
main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...
Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)
Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion Denial of Service !/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploits found with this code can be found at http://www.securityscraper.com/ Released under the VoIPER project Do not hesitate to show enthusiasm and support...
Asterisk IAX2 Resource Exhaustion via Attacked IAX Fuzzer
Exploit for multiple platform in category dos / poc ========================================================= Asterisk IAX2 Resource Exhaustion via Attacked IAX Fuzzer ========================================================= !/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploi...
Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)
!/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploits found with this code can be found at http://www.securityscraper.com/ Released under the VoIPER project Do not hesitate to show enthusiasm and support and help develop this further. use strict; use IO::Socket; use...
VICIDIAL Call Center Suite admin.php SQL Injection
The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'PHPAUTHUSER' and 'PHPAUTHPW' variables before using it to...
VICIDIAL Call Center Suite Default Administrative Credentials
The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite. The remote installation of VICIDIAL is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative...
FreePBX跨站脚本和信息泄漏漏洞
Bugraq ID: 34857 CNCAN ID：CNCAN-2009050801 FreePBX是一款用来控制Asterisk的图形化接口。 FreePBX存在多个安全问题，远程攻击者可以利用漏洞获得系统敏感信息或进行跨站脚本攻击。 -reports.php脚本对"display"参数，config.php对"order"和"extdisplay"参数，recordings/index.php脚本对"sort"参数在返回用户前缺少过滤，可导致在用户浏览器会话中执行任意HTML和脚本代码。...