full-disclosure - asterisk remote pre-auth denial of service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 4 Mar 2007 01:24:09 -0600
From: "Anonymous Person" <anonymousperzon@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: asterisk remote pre-auth denial of service

A very serious remote denial of service  was recently patched in asterisk
some limited information on the problem  can be found here
http://asterisk.org/taxonomy/term/32

the bug exists in the asterisk SIP channel driver, anyone using asterisk
running SIP is advised to patch their systems as soon as possible.

i am posting this code to highlight severity of the bug which was fixed in
the asterisk release yesterday without much of a description

Content of type "text/html" skipped

View attachment "asterisk-sip-kill.c" of type "text/x-csrc" (2817 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/