SourceMage Grimoire Bug List

[bugzilla-daemon AT bugs.sourcemage.org]

http://bugs.sourcemage.org/show_bug.cgi?id=14605

           Summary: asterisk-addons: Remote crash vulnerability in ooh323
                    channel driver
           Product: Codex
           Version: stable grimoire
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: telephony
        AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
        ReportedBy: m.spitzbarth AT gmx.de


Asterisk-addons version 1.4.7 fixes the following vulnerability in the ooh323
channel driver:
http://downloads.digium.com/pub/security/AST-2008-009.html (CVE-2008-2543)

Description:
The ooh323 channel driver provided in Asterisk Addons used a TCP connection to
pass commands internally. The payload of these packets included addresses of
memory which were to be freed after the command was processed. By sending
arbitrary data to the listening TCP socket, one could cause an almost certain
crash since the command handler would attempt to free invalid memory. This
problem was made worse by the fact that the listening TCP socket was bound to
whatever IP address was specified by the "bindaddr" option in ooh323.conf


-- 
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.