CVE-2006-5444

Published Oct 23, 2006 CVSS 2.0 · 7.5 High EPSS 86.5% KEV · Not listed
Description
Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads to a heap-based buffer overflow.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1229-1 New Asterisk packages fix arbitrary code execution
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 7:48 PM
Reserved
Oct 23, 2006, 12:00 AM
Status
Modified
Published
Oct 23, 2006, 5:07 PM
Modified
Jun 16, 2026, 10:31 PM