CVE-2006-0189
eStara Softphone 3.0.1.14-3.0.1.46 - Remote Code Execution via Long SDP Attribute Field
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-0189. PoCs published by kokanin, ZwelL.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Estara Softphone 3.0.1.2 via a maliciously crafted SIP INVITE message. It delivers a bind shell on TCP port 5060 using encoded shellcode.
Description
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a") field in the SDP data of a SIP packet on UDP port 5060.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Estara Softphone 3.0.1.2 via a maliciously crafted SIP INVITE message. It delivers a bind shell on TCP port 5060 using encoded shellcode.
This exploit targets a buffer overflow vulnerability in eStara Softphone by sending a maliciously crafted SIP INVITE packet via UDP to port 5060. The overflow is triggered by an excessively long 'a=' field, leading to arbitrary code execution or a denial-of-service condition.