Page 13 of 140 results (0.009 seconds)

CVSS: 7.5EPSS: 45%CPEs: 36EXPL: 1

CVE-2007-3764 – Asterisk < 1.2.22/1.4.8/2.2.1 - 'chan_skinny' Remote Denial of Service

https://notcve.org/view.php?id=CVE-2007-3764

18 Jul 2007 — The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a certain data length value in a crafted packet, which results in an "overly large memcpy." El controlador de canal Skinny (chan_skinny) en Asterisk anterior a 1.2.22 y 1.4.x anterior a 1.4.8, Business Edition anterior a B.2.2.1, Asteris... • https://www.exploit-db.com/exploits/4196 •

CVSS: 7.5EPSS: 0%CPEs: 36EXPL: 0

CVE-2007-3765

https://notcve.org/view.php?id=CVE-2007-3765

18 Jul 2007 — The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted STUN length attribute in a STUN packet sent on an RTP port. La implementación STUN en Asterisk 1.4.x anterior a 1.4.8, AsteriskNOW anterior a beta7, Appliance Developer Kit anterior a 0.5.0, y s800i anterior a 1.0.2 permite a atacantes remotos provocar denegación de servicio (caida) a través d... • http://ftp.digium.com/pub/asa/ASA-2007-017.pdf •

CVSS: 10.0EPSS: 2%CPEs: 1EXPL: 0

CVE-2007-2488

https://notcve.org/view.php?id=CVE-2007-2488

07 May 2007 — The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of service (application crash), by sending a frame that lacks a 0 byte. El controlador del canal IAX2 (chan_iax2) en Asterisk anterior a 20070504 no anula correctamente los datos terminales, lo cual permite a atacantes remotos disparar la pérdida de datos transmit... • http://ftp.digium.com/pub/asa/ASA-2007-013.pdf •

CVSS: 9.8EPSS: 36%CPEs: 3EXPL: 3

CVE-2007-2293 – Asterisk 1.4 SIP T.38 SDP - Parsing Remote Stack Buffer Overflow (PoC)

https://notcve.org/view.php?id=CVE-2007-2293

26 Apr 2007 — Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long (1) T38FaxRateManagement or (2) T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP INVITE. Múltiples desbordamientos de búfer basados en pila en la función process_sdp del chan_sip.c en el en el analizador sintáctico SIP channel T.38 del Asterisk, anterior al 1.4.3. permiten a atacantes remo... • https://www.exploit-db.com/exploits/29900 •

CVSS: 7.8EPSS: 3%CPEs: 18EXPL: 0

CVE-2007-2294

https://notcve.org/view.php?id=CVE-2007-2294

26 Apr 2007 — The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference. El Manager Interface en Asterisk anterior a 1.2.18 y 1.4.x anterior a 1.4.3 permite a atacantes remotos provocar denegación de servicio (caida) utilizando validación MD5 para validar a un usuario que no tiene definida una contraseña ... • http://secunia.com/advisories/24977 •

CVSS: 7.8EPSS: 1%CPEs: 13EXPL: 0

CVE-2007-2297

https://notcve.org/view.php?id=CVE-2007-2297

26 Apr 2007 — The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service (crash). El SIP channel driver (chan_sip) del Asterisk anterior al 1.2.18 y el 1.4.x anterior al 1.4.3 no analiza sintácticamente de forma correcta los paquetes SIP UDP que no contienen un código de respuesta válido, lo que permite a atacantes remotos provocar una denegación de servicio... • http://bugs.digium.com/view.php?id=9313 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2007-1595

https://notcve.org/view.php?id=CVE-2007-1595

22 Mar 2007 — The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form. El Lenguaje de Extensión de Asterisk (AEL) en pbx/pbx_ael.c de Asterisk no genera extensiones apropiadamente, lo cual permite a atacantes remotos ejecutar extensiones de su elección y tener un impacto desconocido especificando una extensión inválida en formulario... • http://bugs.digium.com/view.php?id=9316 •

CVSS: 7.8EPSS: 4%CPEs: 37EXPL: 0

CVE-2007-1594

https://notcve.org/view.php?id=CVE-2007-1594

22 Mar 2007 — The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP Response code 0 in a SIP packet. La función handle_response en chan_sip.c de Asterisk before 1.2.17 y 1.4.x versiones anteriores a 1.4.2 permite a atacantes remotos provocar una denegación de servicio (caída) mediante una respuesta SIP código 0 en un paquete SIP. • http://bugs.digium.com/view.php?id=9313 •

CVSS: 7.8EPSS: 8%CPEs: 4EXPL: 1

CVE-2007-1561 – Asterisk 1.2.16/1.4.1 - SIP INVITE Remote Denial of Service

https://notcve.org/view.php?id=CVE-2007-1561

21 Mar 2007 — The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP INVITE message with an SDP containing one valid and one invalid IP address. El controlador del canal en Asterisk en versiones anteriores a 1.2.17 y 1.4.x en versiones anteriores a 1.4.2 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un mensaje SIP INVITE con un SDP que contiene una dirección IP válida y otra no válida. • https://www.exploit-db.com/exploits/3566 •

CVSS: 7.8EPSS: 18%CPEs: 18EXPL: 1

CVE-2007-1306 – Asterisk 1.2.15/1.4.0 - Remote Denial of Service

https://notcve.org/view.php?id=CVE-2007-1306

07 Mar 2007 — Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference. Asterisk versiones 1.4 anteriores a 1.4.1 y versiones 1.2 anteriores a 1.2.16, permite a atacantes remotos causar una denegación de servicio (bloqueo) enviando un paquete de Session Initiation Protocol (SIP) sin una URI y Encabezado SIP-version, lo que resulta en un... • https://www.exploit-db.com/exploits/3407 •