CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference.

Link	Resource
http://asterisk.org/node/48319
http://asterisk.org/node/48320
http://www.kb.cert.org/vuls/id/228032	US Government Resource
http://www.securitytracker.com/id?1017723
http://labs.musecurity.com/advisories/MU-200703-01.txt
http://security.gentoo.org/glsa/glsa-200703-14.xml
http://www.securityfocus.com/bid/22838
http://secunia.com/advisories/24380
http://secunia.com/advisories/24578	Vendor Advisory
http://www.osvdb.org/33888
http://www.debian.org/security/2007/dsa-1358
http://www.novell.com/linux/security/advisories/2007_34_asterisk.html
http://secunia.com/advisories/25582	Vendor Advisory
http://www.vupen.com/english/advisories/2007/0830	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32830

Configuration 1

cpe:2.3:a:digium:asterisk:1.2.11:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.12:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.9:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.13:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2_beta2:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.4.0_beta1:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.4.0_beta2:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.15:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.14:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2_beta1:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.0_beta2:*:*:*:*:*:*:* cpe:2.3:a:digium:asterisk:1.2.12.1:*:*:*:*:*:*:*

---

Published : 2007-03-07 12:19

Updated : 2017-07-29 01:30

---

NVD link : CVE-2007-1306

Mitre link : CVE-2007-1306

No products.

NVD-CWE-Other