CVE-2007-5690

Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue, stating that the application requires root access, so privilege boundaries are not crossed
Configurations

Configuration 1 (hide)

cpe:2.3:a:asterisk:zaptel:1.4.5.1:*:*:*:*:*:*:*

History

21 Nov 2024, 00:38

Type Values Removed Values Added
References () http://downloads.digium.com/pub/asa/AST-2007-024.html - () http://downloads.digium.com/pub/asa/AST-2007-024.html -
References () http://securityreason.com/securityalert/3319 - () http://securityreason.com/securityalert/3319 -
References () http://www.eleytt.com/advisories/eleytt_ZAPTEL.pdf - () http://www.eleytt.com/advisories/eleytt_ZAPTEL.pdf -
References () http://www.securityfocus.com/archive/1/482597/100/0/threaded - () http://www.securityfocus.com/archive/1/482597/100/0/threaded -
References () http://www.securityfocus.com/archive/1/483481/100/0/threaded - () http://www.securityfocus.com/archive/1/483481/100/0/threaded -
References () http://www.securityfocus.com/bid/26160 - () http://www.securityfocus.com/bid/26160 -
References () http://www.securitytracker.com/id?1018885 - () http://www.securitytracker.com/id?1018885 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/37335 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/37335 -

07 Nov 2023, 02:01

Type Values Removed Values Added
Summary ** DISPUTED ** Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue, stating that the application requires root access, so privilege boundaries are not crossed. Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue, stating that the application requires root access, so privilege boundaries are not crossed

Information

Published : 2007-10-29 19:46

Updated : 2024-11-21 00:38


NVD link : CVE-2007-5690

Mitre link : CVE-2007-5690

CVE.ORG link : CVE-2007-5690


JSON object : View

Products Affected

asterisk

  • zaptel
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer