Lucene search

K

Openser Security Vulnerabilities

cve
cve

CVE-2007-5469

OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack"). ...

7AI Score

0.008EPSS

2007-10-16 12:17 AM
21
cve
cve

CVE-2006-6875

Buffer overflow in the validateospheader function in the Open Settlement Protocol (OSP) module in OpenSER 1.1.0 and earlier allows remote attackers to execute arbitrary code via a crafted OSP...

8.2AI Score

0.038EPSS

2007-01-05 02:00 AM
17
cve
cve

CVE-2006-6876

Buffer overflow in the fetchsms function in the SMS handling module (libsms_getsms.c) in OpenSER 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SMS message, triggering memory corruption when the "beginning" buffer is copied to the third (pdu)...

7.5AI Score

0.016EPSS

2007-01-05 02:00 AM
18
cve
cve

CVE-2006-6749

Buffer overflow in the parse_expression function in parse_config in OpenSER 1.1.0 allows attackers to have an unknown impact via a long str...

7.2AI Score

0.006EPSS

2006-12-27 12:28 AM
15