CVE-2006-4345
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows...
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response.
- Record
CVE-2006-4345- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response.
- Record
CVE-2006-4345- Updated
- 2026-11-02
EUVDEUVD-2006-4333 No score
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response.
- Record
EUVD-2006-4333- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gqh2-528h-q2h8 No score
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows...
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response.
- Record
GHSA-gqh2-528h-q2h8- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response.
- Record
CVE-2006-4345- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4345 No score
Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response.
- Record
DEBIAN-CVE-2006-4345- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
asteriskDebian:14 |
before 1:1.2.11.dfsg-1, plus listed versions 0.1.11-30.1.11-3woody11:1.0.5-21:1.0.5-41:1.0.6-1 Show 45 moreShow less1:1.0.6-21:1.0.7-11:1.0.7.dfsg.1-11:1.0.7.dfsg.1-21:1.0.7.dfsg.1-2sarge11:1.0.7.dfsg.1-2sarge21:1.0.7.dfsg.1-2sarge31:1.0.7.dfsg.1-2sarge41:1.0.7.dfsg.1-2sarge51:1.0.7.dfsg.1-2sarge61:1.0.9.dfsg-11:1.0.9.dfsg-31:1.0.9.dfsg-41:1.0.9.dfsg-51:1.0.9.dfsg-61:1.2.0-beta1.dfsg-11:1.2.0-beta2.dfsg-11:1.2.0-beta2.dfsg-21:1.2.0-beta2.dfsg-31:1.2.0-rc1.dfsg-11:1.2.0-rc2.dfsg-11:1.2.0.dfsg-11:1.2.0.dfsg-21:1.2.0.dfsg-31:1.2.0.dfsg-41:1.2.0.dfsg-51:1.2.0.dfsg-61:1.2.1.dfsg-11:1.2.1.dfsg-21:1.2.1.dfsg-31:1.2.10.dfsg-11:1.2.10.dfsg-1bpo11:1.2.10.dfsg-21:1.2.10.dfsg-31:1.2.4.dfsg-11:1.2.4.dfsg-21:1.2.4.dfsg-31:1.2.4.dfsg-41:1.2.4.dfsg-51:1.2.4.dfsg-61:1.2.4.dfsg-6+b11:1.2.4.dfsg-71:1.2.7.1.dfsg-11:1.2.7.1.dfsg-21:1.2.7.1.dfsg-3 |
1:1.2.11.dfsg-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4345 is a high vulnerability (CVSS 7.5) in Digium Asterisk, published August 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.73%, the 94th percentile. Fixed in asterisk 1:1.2.11.dfsg-1.
References
vupen.com/english/advisories/2006/3372
gentoo.org/security/en/glsa/glsa-200610-15.xml
labs.musecurity.com/advisories/MU-200608-01.txt
secunia.com/advisories/22651
securityfocus.com/bid/19683
securitytracker.com/id?1016742
Show 8 moreShow less
ftp.digium.com/pub/asterisk/ChangeLog-1.2.11
exchange.xforce.ibmcloud.com/vulnerabilities/28542
sineapps.com/news.php?rssid=1448
nvd.nist.gov/vuln/detail/CVE-2006-4345
github.com/advisories/GHSA-gqh2-528h-q2h8
security-tracker.debian.org/tracker/CVE-2006-4345
Left out here: 1 version. The JSON record has them.