Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 14605] New: asterisk-addons: Remote crash vulnerability in ooh323 channel driver

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 14605] New: asterisk-addons: Remote crash vulnerability in ooh323 channel driver
  • Date: 25 Jul 2008 18:35:00 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=14605

Summary: asterisk-addons: Remote crash vulnerability in ooh323
channel driver
Product: Codex
Version: stable grimoire
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: telephony
AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
ReportedBy: m.spitzbarth AT gmx.de


Asterisk-addons version 1.4.7 fixes the following vulnerability in the ooh323
channel driver:
http://downloads.digium.com/pub/security/AST-2008-009.html (CVE-2008-2543)

Description:
The ooh323 channel driver provided in Asterisk Addons used a TCP connection to
pass commands internally. The payload of these packets included addresses of
memory which were to be freed after the command was processed. By sending
arbitrary data to the listening TCP socket, one could cause an almost certain
crash since the command handler would attempt to free invalid memory. This
problem was made worse by the fact that the listening TCP socket was bound to
whatever IP address was specified by the "bindaddr" option in ooh323.conf


--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.




Archive powered by MHonArc 2.6.24.

Top of Page