OSVDB ID: 81455

Title: Asterisk Skinny Channel Drive KEYPAD_BUTTON_MESSAGE Event Parsing Remote Overflow

Info

Disclosure

Apr 23, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Apr 23, 2012

Description

Asterisk is prone to an overflow condition. The Skinny Channel Drive fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted KEYPAD_BUTTON_MESSAGE event, a remote attacker can potentially execute arbitrary code.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

Upgrade to version 1.6.2.24, 1.8.11.1 or 10.3.1 or higher for Open Source, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Digium, Inc.	Asterisk	1.6.2.23
		1.8.11.0
		10.3.0

References

Security Tracker: 1026962
CVE ID: 2012-2415 (see also: NVD)
Secunia Advisory ID: 48891 48941 49536
Related OSVDB ID: 81454 81456
Vendor Specific Advisory URL: http://downloads.asterisk.org/pub/security/AST-2012-005.html
Packet Storm: http://packetstormsecurity.org/files/112116/Asterisk-Project-Security-Advisory-AST-2012-005.html
Mail List Post: http://seclists.org/bugtraq/2012/Apr/179
Vendor Specific News/Changelog Entry: http://www.debian.org/security/2012/dsa-2460
http://www.gentoo.org/security/en/glsa/glsa-201206-05.xml

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/81455

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Digium, Inc.

Asterisk

References

Credit