Openser

openser

Vendor: Openser • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-5469 1Openser 1Openser Apr 23, 2026 Oct 16, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbe...Show more OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack"). NOTE: Debian disputes this issue, stating that "having the two URIs mismatch is allowed by the standard and happens in some setups for valid reasons.Show less
CVE-2006-6876 1Openser 1Openser Apr 23, 2026 Dec 31, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the fetchsms function in the SMS handling module (libsms_getsms.c) in OpenSER 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SMS message, triggering memory...Show more Buffer overflow in the fetchsms function in the SMS handling module (libsms_getsms.c) in OpenSER 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SMS message, triggering memory corruption when the "beginning" buffer is copied to the third (pdu) argument.Show less
CVE-2006-6875 1Openser 2Openser Openser Osp Module Apr 23, 2026 Dec 31, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the validateospheader function in the Open Settlement Protocol (OSP) module in OpenSER 1.1.0 and earlier allows remote attackers to execute arbitrary code via a crafted OSP header.
CVE-2006-6749 1Openser 1Openser Apr 23, 2026 Dec 27, 2006 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the parse_expression function in parse_config in OpenSER 1.1.0 allows attackers to have an unknown impact via a long str parameter.