NVD

Id
54655  
Name
CVE-2007-2488  
Description
The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of service (application crash), by sending a frame that lacks a 0 byte.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-07  
Modified Date
2012-11-05  
Seq
2007-2488  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277424 54655 CVE-2007-2488 http://ftp.digium.com/pub/asa/ASA-2007-013.pdf  View
277425 54655 CVE-2007-2488 DSA-1358  View
277426 54655 CVE-2007-2488 SUSE-SA:2007:034  View
277427 54655 CVE-2007-2488 23824  View
277428 54655 CVE-2007-2488 ADV-2007-1661  View
277429 54655 CVE-2007-2488 asterisk-iax2-information-disclosure(34085)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53278 JVNDB-2007-001970 Asterisk の IAX2 チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 Asterisk の IAX2 チャネルドライバ (chan_iax2) は、データを適切に NULL 終了しないため、送信データの欠落を誘発し、重要な情報を取得 (メモリコンテンツ) される、またはサービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-2488 25843 CVE-2007-2488 54655 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001970.html 2007-05-07 2012-06-26 View