The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

In Scientific Linux 5, the Ekiga application uses opal.

A flaw was discovered in the way opal handled certain Session Initiation Protocol (SIP) packets. An attacker could use this flaw to crash an application, such as Ekiga, which is linked with opal.
(CVE-2007-4924)

Updated opal packages that fix a security issue are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Open Phone Abstraction Library (opal) is implementation of various telephony and video communication protocols for use over packet based networks.

In Red Hat Enterprise Linux 5, the Ekiga application uses opal.

A flaw was discovered in the way opal handled certain Session Initiation Protocol (SIP) packets. An attacker could use this flaw to crash an application, such as Ekiga, which is linked with opal.
(CVE-2007-4924)

Users should upgrade to these updated opal packages which contain a backported patch to correct this issue.

Jose Miguel Esparza discovered that certain SIP headers were not correctly validated. A remote attacker could send a specially crafted packet to an application linked against opal (e.g. Ekiga) causing it to crash, leading to a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A bug in the SIP protocol handler could be exploited by attackers to crash applications using opal. (CVE-2007-4924)

A flaw in opal, the Open Phone Abstraction Library, was found in how it handles certain Session Initiation Protocol (SIP) packets. An attacker could use this vulnerability to crash an application linked to opal, such as Ekiga.

Updated packages have been patched to prevent these issues.

A bug in the SIP protocol handler could be exploited by attackers to crash applications using opal (CVE-2007-4924).

ID	Name	Product	Family	Severity
60264	Scientific Linux Security Update : opal on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
43656	CentOS 5 : opal (CESA-2007:0957)	Nessus	CentOS Local Security Checks	medium
29918	Ubuntu 6.06 LTS / 6.10 / 7.04 : opal vulnerability (USN-562-1)	Nessus	Ubuntu Local Security Checks	medium
29532	SuSE 10 Security Update : opal (ZYPP Patch Number 4519)	Nessus	SuSE Local Security Checks	medium
27623	Mandrake Linux Security Advisory : opal (MDKSA-2007:205)	Nessus	Mandriva Local Security Checks	medium
27532	openSUSE 10 Security Update : opal (opal-4531)	Nessus	SuSE Local Security Checks	medium
26955	RHEL 5 : opal (RHSA-2007:0957)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2007-4924

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium