CVE-2006-5444

CVE-2006-5444 involves an integer overflow in Asterisk’s Skinny channel driver (chan_skinny.c). Affected are Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, used by Cisco SCCP phones. An attacker can trigger a heap-based buffer overflow via a crafted dlen value, potentially leading to remot...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

Skinny Server Detection

The remote server is an H.323 proxy that understands the Skinny protocol, also known as SCCP, for 'Skinny Client Control Protocol'. Skinny is Cisco's proprietary lightweight terminal control protocol used by some VoIP phones to communicate with Cisco CallManager or Asterisk PBX systems. C Tenable...

Security-Assessment.com Advisory: Asterisk remote heap overflow

======================================================================== = Asterisk - chanskinny Remote Unauthenticated Heap Overflow = = Vendor Website: = http://www.asterisk.org = = Affected Version: = All 1.2-branch releases prior to and including 1.2.12.1 = All 1.0-branch releases prior to an...

asterisk -- remote heap overwrite vulnerability

Adam Boileau of Security-Assessment.com reports: The Asterisk Skinny channel driver for Cisco SCCP phones chanskinny.so incorrectly validates a length value in the packet header. An integer wrap-around leads to heap overwrite, and arbitrary remote code execution as root...

CVE-2005-0186

CVE-2005-0186 affects Cisco IOS releases 12.1YD, 12.2T, 12.3 and 12.3T when ITS/CME/SRST are active. A malformed SCCP control message can trigger a device reboot (DoS). Answer: vulnerable component is IOS Telephony Service/CME/SRST handling of SCCP; root cause is malformed control protocol messag...

CVE-2005-0186

Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service ITS, CallManager Express CME or Survivable Remote Site Telephony SRST, allows remote attackers to cause a denial of service device reboot via a malformed packet to the SCCP port...

CVE-2005-0186: Undefined Security Weakness

Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service ITS, CallManager Express CME or Survivable Remote Site Telephony SRST, allows remote attackers to cause a denial of service device reboot via a malformed packet to the SCCP port...

Cisco IOS Telephony SCCP Control DoS (CSCee08584)

Binary data 2548.prm...

Cisco IOS Telephony Services DoS

DoS on SCCP control protocol parsing if configured tobe used with Cisco IOS Telephony Service ITS, Cisco CallManager Express CME or Survivable Remote Site Telephony SRST...

CVE-2005-0186

Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service ITS, CallManager Express CME or Survivable Remote Site Telephony SRST, allows remote attackers to cause a denial of service device reboot via a malformed packet to the SCCP port...