CVE-2007-4280

Severity Score

6.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.

El dispositivo de canal Skinny (chan_skinny) en el Asterisk Open Source anterior al 1.4.10, el AsteriskNOW anterior al beta7, el Appliance Developer Kit anterior al 0.7.0 y el Appliance s800i before 1.0.3 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) a través del paquete CAPABILITIES_RES_MESSAGE con una capacidad de escrutinio mayor que el array capabilities_res_message de población.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

Single

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-08-09 CVE Reserved
2007-08-09 CVE Published
2024-08-07 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (6)

URL	Tag	Source
http://www.securitytracker.com/id?1018536	Vdb Entry
http://www.vupen.com/english/advisories/2007/2808	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35870	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://downloads.digium.com/pub/asa/ASA-2007-019.pdf	2017-07-29
http://secunia.com/advisories/26340	2017-07-29
http://www.securityfocus.com/bid/25228	2017-07-29

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Asterisk Search vendor "Asterisk"		Asterisk Search vendor "Asterisk" for product "Asterisk"				<= 1.4.9 Search vendor "Asterisk" for product "Asterisk" and version " <= 1.4.9"		-		Affected
Asterisk Search vendor "Asterisk"		Asterisk Appliance Developer Kit Search vendor "Asterisk" for product "Asterisk Appliance Developer Kit"				<= 0.6.0 Search vendor "Asterisk" for product "Asterisk Appliance Developer Kit" and version " <= 0.6.0"		-		Affected
Asterisk Search vendor "Asterisk"		Asterisknow Search vendor "Asterisk" for product "Asterisknow"				<= beta_6 Search vendor "Asterisk" for product "Asterisknow" and version " <= beta_6"		-		Affected
Asterisk Search vendor "Asterisk"		S800i Search vendor "Asterisk" for product "S800i"				<= 1.0.2 Search vendor "Asterisk" for product "S800i" and version " <= 1.0.2"		-		Affected