PT-2006-7473 · Openser · Openser

Publicado 2006-12-31 · Atualizado 2018-10-17 · CVE-2006-6876

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: OpenSER versions 1.2.0 and earlier

Description: A buffer overflow issue exists in the fetchsms function within the SMS handling module, specifically in the libsms getsms.c file. This issue allows remote attackers to cause a denial of service by crashing the system through a crafted SMS message. The crash occurs due to memory corruption when the "beginning" buffer is copied to the third argument, pdu.

Recommendations: For OpenSER versions 1.2.0 and earlier, as a temporary workaround, consider disabling the SMS handling module until a patch is available. Restrict access to the libsms getsms.c file to minimize the risk of exploitation. Avoid processing crafted SMS messages in the affected module until the issue is resolved.

Correção

Identificadores relacionados

CVE-2006-6876

Produtos afetados

Openser

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-6876 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2007-01/0093.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31137 · Nota
• http://osvdb.org/33340 · Nota
• http://securityfocus.com/bid/21800 · Nota
• http://securityfocus.com/archive/1/455415/100/0/threaded · Nota