CVE-2006-4345

Stack-based buffer overflow in channels/chanmgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint AUEP response...

CVE-2006-4345

Stack-based buffer overflow in channels/chanmgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint AUEP response...

CVE-2006-4346

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to 1 execute code via format string specifiers or 2 overwrite files via directory traversals involving unspecified vectors, as demonstrated by the...

CVE-2006-4346

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to 1 execute code via format string specifiers or 2 overwrite files via directory traversals involving unspecified vectors, as demonstrated by the...

CVE-2006-4345

Stack-based buffer overflow in channels/chanmgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint AUEP response...

CVE-2006-4346

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to 1 execute code via format string specifiers or 2 overwrite files via directory traversals involving unspecified vectors, as demonstrated by the...

CVE-2006-4345

Stack-based buffer overflow in channels/chanmgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint AUEP response...

CVE-2006-4346

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to 1 execute code via format string specifiers or 2 overwrite files via directory traversals involving unspecified vectors, as demonstrated by the...

CVE-2006-4346

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to 1 execute code via format string specifiers or 2 overwrite files via directory traversals involving unspecified vectors, as demonstrated by the...

CVE-2006-4346

CVE-2006-4346 affects Asterisk 1.2.10; the Record() function uses client-controlled variables to determine filenames, enabling remote attackers to (1) execute code via format string specifiers and (2) overwrite files through directory traversals (CALLERIDNAME demonstrated). Public sources describ...

CVE-2006-4345

CVE-2006-4345 : A stack-based buffer overflow in MGCP support (channels/chan_mgcp.c) of Asterisk 1.0–1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response. Remediation recommended by Gentoo GLSA indicates upgrading Asterisk to >= 1.2.13. Notes fr...

CVE-2006-4345

Stack-based buffer overflow in channels/chanmgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint AUEP response...

CVE-2006-4345: Undefined Security Weakness

Stack-based buffer overflow in channels/chanmgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint AUEP response...

CVE-2006-4346: Undefined Security Weakness

Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to 1 execute code via format string specifiers or 2 overwrite files via directory traversals involving unspecified vectors, as demonstrated by the...

[Full-disclosure] [MU-200608-01] Multiple Vulnerabilities in Asterisk 1.2.10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerabilities in Asterisk 1.2.10 MU-200608-01 August 23, 2006 http://labs.musecurity.com/advisories.html Affected Product/Versions: Asterisk 1.0.0 through 1.2.10 Product Overview: http://www.asterisk.org/features "Asterisk-based telephony...

[SECURITY] [DSA 1126-1] New Asterisk packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1126-1 [email protected] http://www.debian.org/security/ Martin Schulze July 27th, 2006 http://www.debian.org/security/faq -...

DSA-1126 asterisk - several

Bulletin has no description...

Kiax: Arbitrary code execution

Background Kiax is a graphical softphone supporting the IAX protocol Inter Asterisk eXchange, which allows PC users to make VoIP calls to Asterisk servers. Description The iaxnetread function in the iaxclient library fails to properly handle IAX2 packets with truncated full frames or mini-frames...

Asterisk IAX2 VoIP PBX and multiple IAX clients DoS

DoS on IAX2 channel processing...

GLSA-200606-15 : Asterisk: IAX2 video frame buffer overflow

The remote host is affected by the vulnerability described in GLSA-200606-15 Asterisk: IAX2 video frame buffer overflow Asterisk fails to properly check the length of truncated video frames in the IAX2 channel driver which results in a buffer overflow. Impact : An attacker could exploit this...