Code injection

The SIP channel driver chansip in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service crash...

DEBIAN-CVE-2007-2294

The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service crash by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference...

CVE-2007-2294

CVE-2007-2294 : The Manager Interface in Asterisk versions prior to 1.2.18 and prior to 1.4.3 is vulnerable. An attacker can cause a denial of service (crash) by using MD5 authentication to log in as a user that has no password defined in manager.conf, triggering a NULL pointer dereference. The v...

CVE-2007-2293

Asterisk’s SIP channel T.38 SDP parser (chan_sip.c) contains multiple stack-based buffer overflows in process_sdp, exploitable by long T38FaxRateManagement or T38FaxUdpEC SDP parameters in SIP INVITE messages. Affected are Asterisk versions before 1.4.3. Exploitation allows remote code execution;...

CVE-2007-2294

The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service crash by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference...

CVE-2007-2297

CVE-2007-2297 affects the SIP channel driver (chan_sip) in Asterisk prior to 1.2.18 and 1.4.x prior to 1.4.3. The vulnerability arises from improper parsing of SIP UDP packets that do not contain a valid response code, allowing remote attackers to cause a denial of service (crash). Public details...

CVE-2007-2294

The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service crash by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference...

CVE-2007-2297

The SIP channel driver chansip in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service crash...

CVE-2007-2293

Multiple stack-based buffer overflows in the processsdp function in chansip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long 1 T38FaxRateManagement or 2 T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP...

CVE-2007-2293

Multiple stack-based buffer overflows in the processsdp function in chansip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long 1 T38FaxRateManagement or 2 T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP...

CVE-2007-2297

The SIP channel driver chansip in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service crash...

Asterisk multiple security vulnerabilities

Multiple buffer overflows on T.38 SDP SIP channels parsing. DoS in administration interface. Multiple security vulnerabilities in parsing SIP replies...

[Full-disclosure] ASA-2007-011: Multiple problems in SIP channel parser handling response codes

Asterisk Project Security Advisory - ASA-2007-011 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Multiple problems in SIP channel parser handling | | | respons...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the 1 From, 2 To, 3 Call-ID, 4 User-Agent, and unspecified other SIP protocol fields, which are stored in /var/log/asterisk/full and displayed by...

meth-xss.txt

!/usr/bin/php -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- =-=-=-=-=-= ISSUE: SIP protocol's fields such as From, To, Call-ID, User-Agent and many others can carry html tags, wich are shown unfiltered by the Asterisk Log File tools located at...

FreePBX 2.2 - SIP Packet Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/23575/info FreePBX is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content. Attacker-supplied HTML and script code may be executed in the conte...

FreePBX 2.2 - SIP Packet Multiple HTML Injection Vulnerabilities

FreePBX 2.2 - SIP Packet Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/23575/info FreePBX is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content...

GLSA-200704-01 : Asterisk: Two SIP Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200704-01 Asterisk: Two SIP Denial of Service vulnerabilities The Madynes research team at INRIA has discovered that Asterisk contains a NULL pointer dereferencing error in the SIP channel when handling INVITE messages. Furthermor...

Asterisk: Two SIP Denial of Service vulnerabilities

Background Asterisk is an open source implementation of a telephone private branch exchange PBX. Description The Madynes research team at INRIA has discovered that Asterisk contains a null pointer dereferencing error in the SIP channel when handling INVITE messages. Furthermore qwerty1979...

Asterisk PBX_AEL.C交换阻断安全绕过漏洞

Asterisk是一个开放源代码的软件VoIP PBX系统。 Asterisk存在设计错误，远程攻击者可以利用漏洞绕过安全限制获得敏感信息。 当编译任意标签时Asterisk扩展语言AEL由于不安全生成扩展，攻击者可以导致绕过安全限制，然后获得敏感信息或更改用户设置。 Asterisk Asterisk 1.4.2 Asterisk Asterisk 1.4.1 Asterisk Asterisk 1.2.17 Asterisk Asterisk 1.2.16 Asterisk Asterisk 1.2.15 Asterisk Asterisk 1.2.14 Asterisk...