Lucene search
MitreCVE-2006-0189HistoryJan 13, 2006 - 11:03 a.m.
CVE-2006-0189
2006-01-1311:03:00
mitre
web.nvd.nist.gov
25
2
cve-2006-0189
buffer overflow
estara softphone
remote code execution
sip packet
udp port 5060
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
High
EPSS
0.207
Percentile
96.4%
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka “a”) field in the SDP data of a SIP packet on UDP port 5060.
Affected configurations
Node
estarasoftphoneMatch3.0.1.14
ORestarasoftphoneMatch3.0.1.46
References
Social References
More
Related
cvelist
cvelist
CVE-2006-0189
2006-01-13 11:00:00
exploitdb
exploitdb
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (1)
2006-01-12 00:00:00
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)
2006-01-12 00:00:00
nvd
nvd
CVE-2006-0189
2006-01-13 11:03:00
prion
prion
Buffer overflow
2006-01-13 11:03:00
nessus
nessus
eStara SoftPhone SIP Packet SDP Data attribute Field Overflow
2006-02-22 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
High
EPSS
0.207
Percentile
96.4%
Related for CVE-2006-0189