CVE-2007-1693

The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a Call-Info header without a purpose parameter.

• CWE-20

• http://securityreason.com/securityalert/2716Exploit, Third Party Advisory
• http://voip.null.ro/cgi-bin/cvsweb.cgi/yate/modules/ysipchan.cppIssue Tracking, Third Party Advisory
• http://www.securityfocus.com/archive/1/467289/100/200/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/23746Third Party Advisory, VDB Entry
• http://securityreason.com/securityalert/2716Exploit, Third Party Advisory
• http://voip.null.ro/cgi-bin/cvsweb.cgi/yate/modules/ysipchan.cppIssue Tracking, Third Party Advisory
• http://www.securityfocus.com/archive/1/467289/100/200/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/23746Third Party Advisory, VDB Entry

Published

May 17, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1687Multiple buffer overflows in the Internet Pictures Corporati…
• CVE-2007-1688Buffer overflow in the PhPInfo ActiveX control in PhPCtrl.dl…
• CVE-2007-1689Buffer overflow in the ISAlertDataCOM ActiveX control in ISL…
• CVE-2007-1690Multiple stack-based buffer overflows in Second Sight Softwa…
• CVE-2007-1691Stack-based buffer overflow in Second Sight Software ActiveM…
• CVE-2007-1692The default configuration of Microsoft Windows uses the Web …
• CVE-2007-1695PHP remote file inclusion vulnerability in includes/usercp_r…
• CVE-2007-1696SQL injection vulnerability in ViewNewspapers.asp in Active …
• CVE-2007-1697PHP remote file inclusion vulnerability in header.inc.php in…
• CVE-2007-1698download.php in Philex 0.2.3 and earlier allows remote attac…
• CVE-2007-1699Multiple PHP remote file inclusion vulnerabilities in the SW…
• CVE-2007-1700The session extension in PHP 4 before 4.4.5, and PHP 5 befor…