CVE-2005-4466

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Interaction SIP Proxy 3.0 - Remote Heap Corruption Denial of Service2005-12-21 · dos · multiple · Verified

Impact

Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of space or tab characters.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/18197
• http://securityreason.com/securityalert/281
• http://securitytracker.com/id?1015392
• http://www.hat-squad.com/en/000171.html
• http://www.securityfocus.com/archive/1/419989/100/0/threaded
• http://www.securityfocus.com/bid/16001
• http://www.vupen.com/english/advisories/2005/3029
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23823
• http://secunia.com/advisories/18197
• http://securityreason.com/securityalert/281
• http://securitytracker.com/id?1015392
• http://www.hat-squad.com/en/000171.html
• http://www.securityfocus.com/archive/1/419989/100/0/threaded
• http://www.securityfocus.com/bid/16001
• http://www.vupen.com/english/advisories/2005/3029
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23823