Secunia

Michael Thumann has reported a vulnerability in sipXtapi, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is due to a boundary error when parsing the "CSeq" field and can be exploited to cause a buffer overflow via a packet with an overly long "CSeq" field (larger than 24 bytes).

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been reported in all versions compiled using a codebase from before March 24th, 2006.

Solution
The vulnerability has been fixed in the SVN repository.

Provided and/or discovered by
Michael Thumann

Changelog
Further details available in Customer Area

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047757.html

Deep Links
Links available in Customer Area