PT-2003-1854 · Digium · Asterisk

Publicado 2003-09-12 · Atualizado 2008-09-05 · CVE-2003-0761

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Asterisk versions prior to August 15, 2003

Description: The issue is related to a buffer overflow in the get msg text function of chan sip.c, which is part of the Session Initiation Protocol (SIP) implementation. This allows remote attackers to execute arbitrary code through specific requests, including MESSAGE or INFO requests.

Recommendations: For Asterisk versions prior to August 15, 2003, consider upgrading to a version released after August 15, 2003, to resolve the issue. As a temporary workaround, consider restricting access to the SIP protocol implementation to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2003-0761

Produtos afetados

Asterisk

Referências · 6

• 🔥 http://atstake.com/research/advisories/2003/a090403-1.txt · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0761 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0761 · Nota
• https://security-tracker.debian.org/tracker/CVE-2003-0761 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2003-0761 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-0761 · Nota de Segurança