CVE-2007-4280
Low
Description
The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.
SeverityLow
CVSS3.5
Exploit probability—
ProductAsterisk
PublishedAug 9, 2007
First seenAug 9, 2007
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| asterisk asterisk | v ≤ 1.4.9 | — |
| asterisk asterisk_appliance_developer_kit | v ≤ 0.6.0 | — |
| asterisk asterisknow | v ≤ beta_6 | — |
| asterisk s800i | v ≤ 1.0.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.