CVE-2007-5690: Buffer Overflow
DISPUTED Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifrname field. NOTE: the vendor disputes this issue, stating that the application requires root access, so privilege boundaries are not crossed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5690?
CVE-2007-5690 is disputed, but it is potentially serious as it involves a buffer overflow that could allow local users to gain elevated privileges.
How do I fix CVE-2007-5690?
To mitigate CVE-2007-5690, consider upgrading to a newer version of Asterisk Zaptel, beyond 1.4.5.1, if available.
Who is affected by CVE-2007-5690?
CVE-2007-5690 affects local users of Asterisk Zaptel version 1.4.5.1 who can specify long device names.
What is the nature of the vulnerability in CVE-2007-5690?
CVE-2007-5690 is a buffer overflow vulnerability located in sethdlc.c that may allow privilege escalation.
Is CVE-2007-5690 still a concern today?
CVE-2007-5690 may not be a major concern today due to its age and the availability of newer software versions, but it is still important to maintain updated systems.