BID:19683

Asterisk Multiple Remote Vulnerabilities

CVE-2006-4345 | CVE-2006-4346 |

Info

Asterisk Multiple Remote Vulnerabilities

Bugtraq ID:	19683
Class:	Unknown
CVE:	CVE-2006-4345 CVE-2006-4346
Remote:	Yes
Local:	No
Published:	Aug 23 2006 12:00AM
Updated:	Oct 31 2006 11:07PM
Credit:	The Mu Security research team discovered these vulnerabilities.
Vulnerable:	Gentoo Linux Asterisk Asterisk 1.2.10 Asterisk Asterisk 1.2.9 Asterisk Asterisk 1.2.8 Asterisk Asterisk 1.2.7 Asterisk Asterisk 1.2.6 Asterisk Asterisk 1.2 .0-beta2 Asterisk Asterisk 1.2 .0-beta1 Asterisk Asterisk 1.0.11 Asterisk Asterisk 1.0.10 Asterisk Asterisk 1.0.9 Asterisk Asterisk 1.0.8 Asterisk Asterisk 1.0.7 Asterisk Asterisk 1.0

Not Vulnerable:	Asterisk Asterisk 1.2.11

Discussion

Asterisk Multiple Remote Vulnerabilities

Asterisk is prone to remote buffer-overflow, format-string, and directory-traversal vulnerabilities. These issues arise because the application fails to properly bounds-check and sanitize user-supplied input before copying it to an insufficiently sized memory buffer.

Exploiting these vulnerabilities allows remote attackers to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely crash the server, denying further service to legitimate users.

Exploit / POC

Asterisk Multiple Remote Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Solution / Fix

Asterisk Multiple Remote Vulnerabilities

Solution:
The vendor has released version 1.2.11 to address the buffer-overflow issue.

For the format-string and directory-traversal issues, the vendor has suggested a workaround and will further address these issues in a future version.

Please see the references for more information.

Asterisk Asterisk 1.0