CVE ID:	CVE-2007-2488
Description:	The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of service (application crash), by sending a frame that lacks a 0 byte.
Test IDs:	1.3.6.1.4.1.25623.1.0.58577
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2488 BugTraq ID: 23824 http://www.securityfocus.com/bid/23824 Debian Security Information: DSA-1358 (Google Search) http://www.debian.org/security/2007/dsa-1358 http://osvdb.org/35769 http://secunia.com/advisories/25134 http://secunia.com/advisories/25582 SuSE Security Announcement: SUSE-SA:2007:034 (Google Search) http://www.novell.com/linux/security/advisories/2007_34_asterisk.html http://www.vupen.com/english/advisories/2007/1661 XForce ISS Database: asterisk-iax2-information-disclosure(34085) https://exchange.xforce.ibmcloud.com/vulnerabilities/34085