asterisk -- remote heap overwrite vulnerability

Adam Boileau of Security-Assessment.com reports: The Asterisk Skinny channel driver for Cisco SCCP phones chanskinny.so incorrectly validates a length value in the packet header. An integer wrap-around leads to heap overwrite, and arbitrary remote code execution as root...

CVE-2005-0186

Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service ITS, CallManager Express CME or Survivable Remote Site Telephony SRST, allows remote attackers to cause a denial of service device reboot via a malformed packet to the SCCP port...

CVE-2005-0186

CVE-2005-0186 affects Cisco IOS releases 12.1YD, 12.2T, 12.3 and 12.3T when ITS/CME/SRST are active. A malformed SCCP control message can trigger a device reboot (DoS). Answer: vulnerable component is IOS Telephony Service/CME/SRST handling of SCCP; root cause is malformed control protocol messag...

Cisco IOS Telephony SCCP Control DoS (CSCee08584)

Binary data 2548.prm...

Cisco IOS Telephony Services DoS

DoS on SCCP control protocol parsing if configured tobe used with Cisco IOS Telephony Service ITS, Cisco CallManager Express CME or Survivable Remote Site Telephony SRST...

CVE-2005-0186

Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service ITS, CallManager Express CME or Survivable Remote Site Telephony SRST, allows remote attackers to cause a denial of service device reboot via a malformed packet to the SCCP port...