CVE-2009-4055

CVE-2009-4055 affects Asterisk (Open Source) with the RTP stack. Remote attackers can trigger a DoS (daemon crash) by sending an RTP comfort-noise payload with an excessively long data length. Affected branches include 1.2.x (before 1.2.37), 1.4.x (before 1.4.27.1), 1.6.0.x (before 1.6.0.19), 1.6...

CVE-2011-1147

CVE-2011-1147 affects Asterisk Open Source and related builds: stack/heap buffer overflows in the UDPTL handling (decode_open_type and udptl_rx_packet) may allow a remote attacker to crash the process or execute arbitrary code. Affected products include Asterisk Open Source 1.4.x before 1.4.39.2,...

CVE-2009-3727

CVE-2009-3727 affects Asterisk Open Source (various 1.2.x, 1.4.x, 1.6.x lineages; Business Edition; AsteriskNOW; s800i). Root cause: different error messages for valid/invalid SIP usernames via crafted REGISTER messages, enabling remote username enumeration via inconsistent To header URI and Dige...