Cisco 7940/7960 Phone SIP INVITE消息远程拒绝服务漏洞

Cisco IP Phone是一套通过IP网络提供语音通信的系统。 Cisco IP Phone在处理某些畸形SIP INVITE消息时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致设备重载无法正常工作。 如果远程攻击者向设备发送了在Remote-Party-ID中包含有畸形sipURI字段的特制INVITE消息的话，就可以导致设备重载。 Cisco IP Phone 7960 Cisco IP Phone 7940 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.cisco.com/cgi-bin/tablebuild.pl/ip-7900se...

[Full-disclosure] Grandstream Budge Tone-200 denial of service vulnerability

MADYNES Security Advisory http://madynes.loria.fr/ http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware: Grandstream Budge Tone-200 IP Phone...

Grandstream Budge Tone VOIP phones DoS

Crash on SIP protocol INVITE message parsing...

Grandstream Budge Tone-200 IP Phone (Digest domain) DoS Exploit

No description provided by source. !/usr/bin/perl MADYNES Security Advisory http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware: Grandstream Budge Tone-200 IP Phone...

CVE-2007-1561

The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP INVITE message with an SDP containing one valid and one invalid IP address...

CVE-2007-1561

The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP INVITE message with an SDP containing one valid and one invalid IP address...

Code injection

The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP INVITE message with an SDP containing one valid and one invalid IP address...

CVE-2007-1561

The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP INVITE message with an SDP containing one valid and one invalid IP address...

CVE-2007-1561

The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP INVITE message with an SDP containing one valid and one invalid IP address...

CVE-2007-1561

The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP INVITE message with an SDP containing one valid and one invalid IP address...

Asterisk SIP Invite消息远程拒绝服务漏洞

Asterisk是一个开放源代码的软件VoIP PBX系统。 Asterisk处理INVITE消息存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 发送畸形的INVITE消息可导致应用程序崩溃，匿名INVITE的SDP包含2个连接头，第一个必须是合法，而第二个头数据使用非法数据，这里的IP地址必须非法，呼叫者不需要合法用户或者dialplan中的用户。asterisk设置为不允许匿名调用，合法用户和密码必须知道。 Asterisk Asterisk 1.4.1 Asterisk Asterisk 1.2.16 Asterisk Asterisk 1.2.15 Asterisk...

Cisco 7940 IP Phone denial of service

Crash on malformed INVITE SIP packet...

Grandstream Budge Tone-200 IP Phone (Digest domain) DoS Exploit

Exploit for hardware platform in category dos / poc =============================================================== Grandstream Budge Tone-200 IP Phone Digest domain DoS Exploit =============================================================== !/usr/bin/perl MADYNES Security Advisory...

CVE-2007-1561: Undefined Security Weakness

The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP INVITE message with an SDP containing one valid and one invalid IP address...

Cisco Phone 7940/7960 (SIP INVITE) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Title: Cisco 7940 SIP INVITE remote DOS Date: February 19, 2007 ID: KIPH2 Synopsis: After sending a cra fted INVITE message the device immediately reboots. The phone does not check properly the sipURI field of the ...

Grandstream Budge Tone-200 IP Phone - Digest domain Denial of Service

Grandstream Budge Tone-200 IP Phone - Digest domain Denial of Service !/usr/bin/perl MADYNES Security Advisory http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware:...

Grandstream Budge Tone-200 IP Phone - Digest domain Denial of Service

!/usr/bin/perl MADYNES Security Advisory http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware: Grandstream Budge Tone-200 IP Phone...

Design/Logic Flaw

Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVITE request. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2007-1542

Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVITE request. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2007-1542

Cisco IP Phone 7940/7960 devices with firmware prior to POS8-6-0 are affected by a denial-of-service vulnerability triggered by malformed SIP INVITE messages in the Remote-Party-ID sipURI field. A remote attacker can cause the phones to reboot, leading to temporary DoS. The issue stems from error...