CVE-2007-5690: Asterisk Zaptel

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue, stating that the application requires root access, so privilege boundaries are not crossed

Affected products

Published 2007-10-29. Last modified 2026-06-16.