CVE-2007-4280

The CVE-2007-4280 issue affects the Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3. The vulnerability arises when processing a CAPABILITIES_RES_MESSAGE packet containing a ...

CVE-2007-4280

The Skinny channel driver chanskinny in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service application crash via a CAPABILITIESRESMESSAGE packet with a...

CVE-2007-4280: Undefined Security Weakness

The Skinny channel driver chanskinny in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service application crash via a CAPABILITIESRESMESSAGE packet with a...

Asterisk Skinny (SIP) VoIP protocol DoS

CAPABILITIESRESMESSAGE integer array overflow...

[Full-disclosure] ASA-2007-019: Remote crash vulnerability in Skinny channel driver

Asterisk Project Security Advisory - ASA-2007-019 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote crash vulnerability in Skinny channel | | | driver |...

CVE-2007-4103

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

Design/Logic Flaw

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

CVE-2007-4103

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

CVE-2007-4103

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

DEBIAN-CVE-2007-4103

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

CVE-2007-4103

The CVE-2007-4103 issue affects the IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x (pre-1.2.23), Asterisk Open 1.4.x (pre-1.4.9), and Asterisk Appliance Developer Kit (pre-0.6.0). When configured to allow unauthenticated calls, remote attackers can cause denial of service by flooding call...

CVE-2007-4103

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

CVE-2007-4103

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

Asterisk < 1.2.22 1.4.8 IAX2 channel driver Remote Crash Exploit

No description provided by source. !/usr/bin/env ruby author = tenkeiev Script to test chaniax for the vuln in ASA-2007-015 Trigger subtypes of 11 or 12 will crash an unpatched server First establish a call - send new, recv accept, send ack, recv answer, send ack Then send IAX2 control packets wi...

CVE-2007-4103: Missing Release of Resource after Effective Lifetime

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

Asterisk 1.2.221.4.8 - IAX2 Channel Driver Remote Crash

Asterisk 1.2.221.4.8 - IAX2 Channel Driver Remote Crash !/usr/bin/env ruby author = tenkeiev Script to test chaniax for the vuln in ASA-2007-015 Trigger subtypes of 11 or 12 will crash an unpatched server First establish a call - send new, recv accept, send ack, recv answer, send ack Then send IA...

Asterisk < 1.2.22, 1.4.8 IAX2 channel driver Remote Crash Exploit

Exploit for multiple platform in category dos / poc ================================================================= Asterisk \r\n" exit -1 else hostname = ARGV0 ifARGV10,2 == '0x' || ARGV10,2 == '0X' triggersubtype = ARGV1.hex else triggersubtype = ARGV1.toi end end t = UDPSocket.new...

Asterisk < 1.2.22/1.4.8 - IAX2 Channel Driver Remote Crash

!/usr/bin/env ruby author = tenkeiev Script to test chaniax for the vuln in ASA-2007-015 Trigger subtypes of 11 or 12 will crash an unpatched server First establish a call - send new, recv accept, send ack, recv answer, send ack Then send IAX2 control packets with subtypes 0x0b or 0x0c that conta...

Asterisk VoIP server IAX2 DoS

NEW requests flood causes resources exhaustion...

[Full-disclosure] ASA-2007-018: Resource exhaustion vulnerability in IAX2 channel driver

Asterisk Project Security Advisory - ASA-2007-018 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Resource Exhaustion vulnerability in IAX2 channel | | | driver...