Vuln Dev
Asterisk ignoring replayed libpcap sessions Oct 28 2006 10:47PM
nnp (version5 gmail com) (4 replies)
Re: Asterisk ignoring replayed libpcap sessions Oct 30 2006 10:01PM
Aaron Turner (synfinatic gmail com)
Re: Asterisk ignoring replayed libpcap sessions Oct 30 2006 09:11AM
Stefano Zanero (s zanero securenetwork it) (1 replies)
Re: Asterisk ignoring replayed libpcap sessions Oct 30 2006 08:00PM
nnp (version5 gmail com)
Re: Asterisk ignoring replayed libpcap sessions Oct 30 2006 05:15AM
Pravin (shindepravin gmail com)
Well,
I am not sure but, does tcpreplay takes care of sequence numbers?
May be the victim is selecting different initial sequence number everytime,
Does tcpreplay modifies the sequence number accordingly?

On 10/29/06, nnp <version5 (at) gmail (dot) com [email concealed]> wrote:
> Hey,
> I'm currently testing the Asterisk PBX for vulnerabilities but I just
> encountered an interesting problem when trying to recreate a crash.
> Using a fuzzer I can crash it in the exact same place every time. I am
> recording these session using ethereal (wireshark) and then replaying
> them using tcpreplay e.g
>
> sudo tcpreplay -i lo dieAsterisk.eth
>
> Anyways, the problem is Asterisk completely ignores the data sent to
> it via tcpreplay. I'm not sure what the issue could be. The packets
> replayed are identical. Is anyone aware of any checksum that takes
> timing into account or whatnot in Asterisk?
>
> Thanks,
> nnp
>
> --
> http://silenthack.co.uk
>

--
Pravin Shinde

[ reply ]
Re: Asterisk ignoring replayed libpcap sessions Oct 29 2006 08:15PM
gaurav saha (gauravsaha007 yahoo com)


 

Privacy Statement
Copyright 2010, SecurityFocus