18197Third-party advisory
http://secunia.com/advisories/18197 CVE-2005-4466
Interaction SIP Proxy 3.0 - Remote Heap Corruption Denial of Service
Record summary
CVE-2005-4466 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of space or tab characters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBInteraction SIP Proxy 3.0 - Remote Heap Corruption Denial of ServiceExploitDB exploitby Behrang FouladiNot analyzed1 file
References
9281Third-party advisory
http://securityreason.com/securityalert/281 1015392vdb entry
http://securitytracker.com/id?1015392 hat-squad.com
http://www.hat-squad.com/en/000171.html 20051221 [Hat-Squad] Remote Heap Corruption Vulnerability in Interaction SIP Proxymailing list
http://www.securityfocus.com/archive/1/419989/100/0/threaded 16001vdb entry
http://www.securityfocus.com/bid/16001 ADV-2005-3029vdb entry
http://www.vupen.com/english/advisories/2005/3029 sipproxy-i3sipmsg-bo(23823)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/23823 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-4466