CVE-2005-4050

Опубликовано: 07 дек. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol (SIP) packet.

Ссылки

http://secunia.com/advisories/17852
http://securityreason.com/securityalert/231
http://securitytracker.com/id?1015314
http://www.securityfocus.com/archive/1/418653/100/0/threaded
http://www.securityfocus.com/bid/15711
http://www.securitylab.net/research/2005/12/buffer_overflow_in_multitech_v.html
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2005/2781
https://exchange.xforce.ibmcloud.com/vulnerabilities/23416
http://secunia.com/advisories/17852
http://securityreason.com/securityalert/231
http://securitytracker.com/id?1015314
http://www.securityfocus.com/archive/1/418653/100/0/threaded
http://www.securityfocus.com/bid/15711
http://www.securitylab.net/research/2005/12/buffer_overflow_in_multitech_v.html
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2005/2781
https://exchange.xforce.ibmcloud.com/vulnerabilities/23416

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:h:multi-tech_systems:multivoip:*:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06287

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-rqpw-qgx7-wjhg

github

почти 4 года назад