CVE-2008-5396

CVE-2008-5396 is an array index error in Zaptel (DAHDI) drivers, affecting Zaptel versions up to 1.4.11 and earlier. The flaw resides in the torisa.c and tor2.c code paths that handle the ZT_SPANCONFIG ioctl, allowing local users in the dialout group to overwrite kernel memory by writing to /dev/...

CVE-2008-5744

CVE-2008-5744 describes an array index error in the zaptel/DAHDI driver (dahdi/tor2.c) that allows local users in the dialout group to overwrite kernel memory by writing to /dev/zap/ctl. Affected: Zaptel/DAHDI versions up to 1.4.11 (and related patches). The root cause relates to an incorrect tor...

CVE-2007-5690

CVE-2007-5690 affects the Asterisk Zaptel component (zaptel 1.4.x). The vulnerability is a buffer overflow in sethdlc.c triggered by a long device name (ifr_name) and could allow local privilege escalation. OpenVAS/Nessus entries indicate affected Fedora packages updated to mitigate this issue (e...