3558 matches found
DEBIAN-CVE-2007-1306
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...
CVE-2007-1306
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...
CVE-2007-1306
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...
Null pointer dereference
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...
CVE-2007-1306
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...
CVE-2007-1306
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...
CVE-2007-1306
CVE-2007-1306 affects Asterisk SIP: a NULL pointer dereference in the SIP handling code can be triggered by a remote attacker sending a SIP packet that lacks a URI and SIP-version header, causing a crash (DoS). Affected versions per public sources: Asterisk 1.4.x before 1.4.1 and 1.2.x before 1.2...
Asterisk null pointer dereference remote pre-authentication DoS vulnerability
Overview Asterisk contains a null pointer dereference vulnerability that may allow a remote, unauthenticated attacker to cause a denial-of-service condition on a vulnerable system. Description Asterisk is a popular PBX application with VoIP support. Asterisk contains a null pointer dereference...
Asterisk 1.2.151.4.0 - Remote Denial of Service
Asterisk 1.2.151.4.0 - Remote Denial of Service / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750...
[Full-disclosure] asterisk remote pre-auth denial of service
A very serious remote denial of service was recently patched in asterisk some limited information on the problem can be found here http://asterisk.org/taxonomy/term/32 the bug exists in the asterisk SIP channel driver, anyone using asterisk running SIP is advised to patch their systems as soon as...
Asterisk <= 1.2.15 / 1.4.0 pre-auth Remote Denial of Service Exploit
Exploit for multiple platform in category dos / poc ==================================================================== Asterisk Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750, req=0x4088e760, uri=0x0 at...
Asterisk 1.2.15/1.4.0 - Remote Denial of Service
/ this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750, req=0x4088e760, uri=0x0 at chansip.c:8257 8257...
Asterisk <= 1.2.15 / 1.4.0 pre-auth Remote Denial of Service Exploit
No description provided by source. / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750,...
SUSE-SA:2006:069: asterisk
The remote host is missing the patch for the advisory SUSE-SA:2006:069 asterisk. Two security problem have been found and fixed in the PBX software Asterisk. CVE-2006-5444: Integer overflow in the getinput function in the Skinny channel driver chanskinny.c as used by Cisco SCCP phones, allows...
Asterisk存在多个安全漏洞
Asterisk是一款开放源代码的PBX系统。 Asterisk MGCP实现存在远程堆栈缓冲区溢出，远程攻击者可以利用漏洞以进程权限执行任意指令。 攻击者可以通过使用畸形AUEP audit endpoint应答消息来触发。 另一个问题是存在于处理发送给Record函数的文件名，通过格式串攻击可导致任意代码执行，或者通过目录遍历攻击可导致任意文件覆盖。不过这个漏洞需要管理员使用客户端控制的变量作为文件名的一部分。 Asterisk Asterisk 1.2.10 Asterisk Asterisk 1.2.9 Asterisk Asterisk 1.2.8 Asterisk...
Debian DSA-1229-1 : asterisk - integer overflow
Adam Boileau discovered an integer overflow in the Skinny channel driver in Asterisk, an Open Source Private Branch Exchange or telephone system, as used by Cisco SCCP phones, which allows remote attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[SECURITY] [DSA 1229-1] New Asterisk packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1229-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2006 http://www.debian.org/security/faq -...
CVE-2006-6244
Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 is vulnerable to arbitrary command execution via shell metacharacters in CALLERID(name) or CALLERID(number). Root cause: improper handling of shell metacharacters in these fields. The available sources document this ...
[Full-disclosure] Asterisk Local and Remote Denial of Service Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: Asterisk Open Source PBX Impact: Multiple Local and Remote Denials of Service Versions: All versions prior to 1.2.13 Author: Jesus Oquendo echo @infiltrated|sed 's/^/sil/g;s/$/.net/g' I. BACKGROUND Asterisk is an Open Source PBX which runs on...