NVD

Id
61607  
Name
CVE-2006-2923  
Description
The iax_net_read function in the iaxclient open source library, as used in multiple products including (a) LoudHush 1.3.6, (b) IDE FISK 1.35 and earlier, (c) Kiax 0.8.5 and earlier, (d) DIAX, (e) Ziaxphone, (f) IAX Phone, (g) X-lite, (h) MediaX, (i) Extreme Networks ePhone, and (j) iaxComm before 1.2.0, allows remote attackers to execute arbitrary code via crafted IAX 2 (IAX2) packets with truncated (1) full frames or (2) mini-frames, which are detected in a length check but still processed, leading to buffer overflows related to negative length values.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-09  
Modified Date
2011-03-28  
Seq
2006-2923  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318709 61607 CVE-2006-2923 http://iaxclient.sourceforge.net/iaxcomm/  View
318710 61607 CVE-2006-2923 http://sourceforge.net/project/shownotes.php?release_id=423099&group_id=131960  View
318711 61607 CVE-2006-2923 http://www.coresecurity.com/common/showdoc.php?idx=548&idxseccion=10  View
318712 61607 CVE-2006-2923 GLSA-200606-30  View
318713 61607 CVE-2006-2923 http://www.loudhush.ro/changelog.txt  View
318714 61607 CVE-2006-2923 20060609 CORE-2006-0327: IAXclient truncated frames vulnerabilities  View
318715 61607 CVE-2006-2923 18307  View
318716 61607 CVE-2006-2923 ADV-2006-2180  View
318717 61607 CVE-2006-2923 ADV-2006-2284  View
318718 61607 CVE-2006-2923 ADV-2006-2285  View
318719 61607 CVE-2006-2923 ADV-2006-2286  View
318720 61607 CVE-2006-2923 iaxclient-truncated-frame-bo(27047)  View

Related JVN