FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Vulnerabilities in H.323 implementations

Affected packages
	pwlib	<	1.5.0_5
	asterisk	<=	0.7.2
	openh323	<	1.12.0_4

Details

VuXML ID	27c331d5-64c7-11d8-80e3-0020ed76ef5a
Discovery	2004-01-13
Entry	2004-02-22
Modified	2004-06-08

The NISCC and the OUSPG developed a test suite for the H.323 protocol. This test suite has uncovered vulnerabilities in several H.323 implementations with impacts ranging from denial-of-service to arbitrary code execution.

In the FreeBSD Ports Collection, `pwlib' is directly affected. Other applications such as `asterisk' and `openh323' incorporate `pwlib' statically and so are also independently affected.

References

CERT/CC Security Advisory	CA-2004-01
CERT/CC Vulnerability Note	749342
CVE Name	CVE-2004-0097
URL	http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/h2250v4/index.html
URL	http://www.southeren.com/blog/archives/000055.html
URL	http://www.uniras.gov.uk/vuls/2004/006489/h323.htm