CVE-2007-3764

Asterisk < 1.2.22 and 1.4.x < 1.4.8 - Denial of Service via Crafted Skinny Channel Packet

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3764. PoCs published by fbffff.

AI-analyzed exploit summary This exploit targets CVE-2007-3764, a vulnerability in Asterisk's chan_skinny module. It sends a malformed register message to trigger a denial-of-service (DoS) condition by crashing the service.

Description

The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a certain data length value in a crafted packet, which results in an "overly large memcpy."

Exploits (1)

exploitdb WORKING POC VERIFIED

by fbffff · cdosmultiple

https://www.exploit-db.com/exploits/4196

View Code ZIP pw:eip

This exploit targets CVE-2007-3764, a vulnerability in Asterisk's chan_skinny module. It sends a malformed register message to trigger a denial-of-service (DoS) condition by crashing the service.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Asterisk with chan_skinny module enabled

No auth needed

Prerequisites: Target with chan_skinny module enabled and accessible on port 2000/TCP

MITRE ATT&CK