CVE-2007-5690 Information

Description

LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks DISPUTED LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue stating that the application requires root access so privilege boundaries are not crossed.

Reference

http://downloads.digium.com/pub/asa/AST-2007-024.html http://securityreason.com/securityalert/3319 http://www.eleytt.com/advisories/eleytt_ZAPTEL.pdf http://www.securityfocus.com/archive/1/482597/100/0/threaded http://www.securityfocus.com/archive/1/483481/100/0/threaded http://www.securityfocus.com/bid/26160 http://www.securitytracker.com/id?1018885 https://exchange.xforce.ibmcloud.com/vulnerabilities/37335