CVE

Id
25845  
CVE No.
CVE-2007-2488  
Status
Candidate  
Description
The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of service (application crash), by sending a frame that lacks a 0 byte.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259389 25845 CVE-2007-2488 CONFIRM:http://ftp.digium.com/pub/asa/ASA-2007-013.pdf  View
259390 25845 CVE-2007-2488 DEBIAN:DSA-1358  View
259391 25845 CVE-2007-2488 URL:http://www.debian.org/security/2007/dsa-1358  View
259392 25845 CVE-2007-2488 SUSE:SUSE-SA:2007:034  View
259393 25845 CVE-2007-2488 URL:http://www.novell.com/linux/security/advisories/2007_34_asterisk.html  View
259394 25845 CVE-2007-2488 BID:23824  View
259395 25845 CVE-2007-2488 URL:http://www.securityfocus.com/bid/23824  View
259396 25845 CVE-2007-2488 OSVDB:35769  View
259397 25845 CVE-2007-2488 URL:http://osvdb.org/35769  View
259398 25845 CVE-2007-2488 VUPEN:ADV-2007-1661  View
259399 25845 CVE-2007-2488 URL:http://www.vupen.com/english/advisories/2007/1661  View
259400 25845 CVE-2007-2488 SECUNIA:25134  View
259401 25845 CVE-2007-2488 URL:http://secunia.com/advisories/25134  View
259402 25845 CVE-2007-2488 SECUNIA:25582  View
259403 25845 CVE-2007-2488 URL:http://secunia.com/advisories/25582  View
259404 25845 CVE-2007-2488 XF:asterisk-iax2-information-disclosure(34085)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55107 JVNDB-2007-003799 LiveData Server におけるサービス運用妨害 (DoS) の脆弱性 LiveData Server には、サービス運用妨害 (終了) 状態となる脆弱性が存在します。 CVE-2007-2490 25845 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003799.html  View