medium5.0
CVE-2007-3765
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote at…
Impact
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted STUN length attribute in a STUN packet sent on an RTP port.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asterisk | Asterisk | Versions 1.0, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10 |
| Asterisk | Asterisk Appliance Developer Kit | through 0.4 |
| Asterisk | Asterisknow | Versions beta_5, beta_6 |
| Asterisk | S800i Appliance | Versions 1.0, 1.0.1 |
References
- NVD record
- CVE.org record
- http://ftp.digium.com/pub/asa/ASA-2007-017.pdf
- http://secunia.com/advisories/26099
- http://www.securityfocus.com/bid/24950
- http://www.securitytracker.com/id?1018407
- http://www.vupen.com/english/advisories/2007/2563
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35480
- http://ftp.digium.com/pub/asa/ASA-2007-017.pdf
- http://secunia.com/advisories/26099
- http://www.securityfocus.com/bid/24950
- http://www.securitytracker.com/id?1018407
- http://www.vupen.com/english/advisories/2007/2563
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35480