VYPR
Unrated severityNVD Advisory· Published Aug 24, 2006· Updated Jun 16, 2026

CVE-2006-4345

CVE-2006-4345

Description

Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21
  • Digium/Asterisk20 versions
    cpe:2.3:a:digium:asterisk:1.0.0:*:*:*:*:*:*:*+ 19 more
    • cpe:2.3:a:digium:asterisk:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0_rc1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.0_rc2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.2.0_beta1:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.2.0_beta2:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:asterisk:1.2.9:*:*:*:*:*:*:*
  • Range: >=1.0, <=1.2.10

Patches

Vulnerability mechanics

References

11

News mentions

0

No linked articles in our index yet.