CVE-2006-5444

Published: Oct 23, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads to a heap-based buffer overflow.

Affected (26)

Products: Digium: Asterisk

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 0.1.7
Digium Asterisk	Version 0.1.8
Digium Asterisk	Version 0.1.9.1
Digium Asterisk	Version 0.1.9
Digium Asterisk	Version 0.2
Digium Asterisk	Version 0.3
Digium Asterisk	Version 0.4
Digium Asterisk	Version 0.7.1
Digium Asterisk	Version 0.7.2
Digium Asterisk	Version 0.7
Digium Asterisk	Version 0.9
Digium Asterisk	Version 1.0.10
Digium Asterisk	Version 1.0.11
Digium Asterisk	Version 1.0.7
Digium Asterisk	Version 1.0.8
Digium Asterisk	Version 1.0.9
Digium Asterisk	Version 1.0
Digium Asterisk	Version 1.2.10
Digium Asterisk	Version 1.2.11
Digium Asterisk	Version 1.2.12
Digium Asterisk	Version 1.2.6
Digium Asterisk	Version 1.2.7
Digium Asterisk	Version 1.2.8
Digium Asterisk	Version 1.2.9
Digium Asterisk	Version 1.2_beta1
Digium Asterisk	Version 1.2_beta2

References (38)

http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.0.12

Source: cve@mitre.org

Patch

http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13

Source: cve@mitre.org

Patch

http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050171.html

Source: cve@mitre.org

http://secunia.com/advisories/22480

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/22651

Source: cve@mitre.org

http://secunia.com/advisories/22979

Source: cve@mitre.org

http://secunia.com/advisories/23212

Source: cve@mitre.org

http://securitytracker.com/id?1017089

Source: cve@mitre.org

Patch

http://www.asterisk.org/node/109

Source: cve@mitre.org

Patch

http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/521252

Source: cve@mitre.org

US Government Resource

http://www.novell.com/linux/security/advisories/2006_69_asterisk.html

Source: cve@mitre.org

http://www.osvdb.org/29972

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/449127/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/449183/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20617

Source: cve@mitre.org

ExploitPatch

http://www.us.debian.org/security/2006/dsa-1229

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4097

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29663

Source: cve@mitre.org

http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.0.12

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050171.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22480

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/22651

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22979

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23212

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017089

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.asterisk.org/node/109

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/521252

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.novell.com/linux/security/advisories/2006_69_asterisk.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/29972

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/449127/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/449183/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20617

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.us.debian.org/security/2006/dsa-1229

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/4097

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/29663

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.