Asterisk

Zaptel

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2008-5744

Exploit
  • EPSS 0.03%
  • Published 26.12.2008 21:30:00
  • Last modified 09.04.2025 00:30:58

Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to an incorrect tor2 patch for CVE-2008-5...

7.2

CVE-2008-5396

  • EPSS 0.03%
  • Published 09.12.2008 00:30:00
  • Last modified 09.04.2025 00:30:58

Array index error in the (1) torisa.c and (2) dahdi/tor2.c drivers in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to missing validati...

4.6

CVE-2007-5690

  • EPSS 0.05%
  • Published 29.10.2007 19:46:00
  • Last modified 09.04.2025 00:30:58

Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue, stating that the application requires root ac...