CVE-2006-2923

The iax_net_read function in the iaxclient open source library, as used in multiple products including (a) LoudHush 1.3.6, (b) IDE FISK 1.35 and earlier, (c) Kiax 0.8.5 and earlier, (d) DIAX, (e) Ziaxphone, (f) IAX Phone, (g) X-lite, (h) MediaX, (i) Extreme Networks ePhone, and (j) iaxComm before 1.2.0, allows remote attackers to execute arbitrary code via crafted IAX 2 (IAX2) packets with truncated (1) full frames or (2) mini-frames, which are detected in a length check but still processed, leading to buffer overflows related to negative length values.

• CWE-119

• http://iaxclient.sourceforge.net/iaxcomm/
• http://secunia.com/advisories/20466Patch, Vendor Advisory
• http://secunia.com/advisories/20560Vendor Advisory
• http://secunia.com/advisories/20567Vendor Advisory
• http://secunia.com/advisories/20623Vendor Advisory
• http://secunia.com/advisories/20900Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=423099&group_id=131960
• http://www.coresecurity.com/common/showdoc.php?idx=548&idxseccion=10
• http://www.gentoo.org/security/en/glsa/glsa-200606-30.xml
• http://www.loudhush.ro/changelog.txt
• http://www.securityfocus.com/archive/1/436638/100/0/threaded
• http://www.securityfocus.com/bid/18307Patch
• http://www.vupen.com/english/advisories/2006/2180Vendor Advisory
• http://www.vupen.com/english/advisories/2006/2284Vendor Advisory
• http://www.vupen.com/english/advisories/2006/2285Vendor Advisory
• http://www.vupen.com/english/advisories/2006/2286Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27047
• http://iaxclient.sourceforge.net/iaxcomm/
• http://secunia.com/advisories/20466Patch, Vendor Advisory
• http://secunia.com/advisories/20560Vendor Advisory
• http://secunia.com/advisories/20567Vendor Advisory
• http://secunia.com/advisories/20623Vendor Advisory
• http://secunia.com/advisories/20900Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=423099&group_id=131960
• http://www.coresecurity.com/common/showdoc.php?idx=548&idxseccion=10
• http://www.gentoo.org/security/en/glsa/glsa-200606-30.xml
• http://www.loudhush.ro/changelog.txt
• http://www.securityfocus.com/archive/1/436638/100/0/threaded
• http://www.securityfocus.com/bid/18307Patch
• http://www.vupen.com/english/advisories/2006/2180Vendor Advisory
• http://www.vupen.com/english/advisories/2006/2284Vendor Advisory
• http://www.vupen.com/english/advisories/2006/2285Vendor Advisory
• http://www.vupen.com/english/advisories/2006/2286Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27047

Published

Jun 9, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2917Directory traversal vulnerability in the IMAP server in WinG…
• CVE-2006-2918The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0…
• CVE-2006-2919Unspecified vulnerability in Microsoft NetMeeting 3.01 allow…
• CVE-2006-2920Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow …
• CVE-2006-2921PHP remote file inclusion vulnerability in cmpro_header.inc.…
• CVE-2006-2922Multiple PHP remote file inclusion vulnerabilities in Miraks…
• CVE-2006-2924Ingate Firewall in the SIP module before 4.4.1 and SIParator…
• CVE-2006-2925Cross-site scripting (XSS) vulnerability in the web interfac…
• CVE-2006-2926Stack-based buffer overflow in the WWW Proxy Server of Qbik …
• CVE-2006-2927Multiple cross-site scripting (XSS) vulnerabilities in post.…
• CVE-2006-2928Multiple PHP remote file inclusion vulnerabilities in CMS-Ba…
• CVE-2006-2929PHP remote file inclusion vulnerability in contrib/forms/eva…