Gentoo Security Advisory GLSA 200610-15 (asterisk)

The remote host is missing updates announced in advisory GLSA 200610-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE 10 Security Update : asterisk (asterisk-2272)

This update fixes 2 security problem in the PBX software Asterisk. CVE-2006-5444: Integer overflow in the getinput function in the Skinny channel driver chanskinny.c as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integ...

CVE-2006-5445

Summary: CVE-2006-5445 affects the SIP channel driver (channels/chan_sip.c) in Asterisk. Affected versions are Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3. Impact: remote attackers can cause a denial of service through resource consumption by triggering creation of a real pvt struct...