Mandriva Update for lha MDKSA-2007:117 (lha)

Check for the Version of lha OpenVAS Vulnerability Test Mandriva Update for lha MDKSA-2007:117 lha Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

CVE-2008-2030

Technical details (affected product/version, root cause, impact, exploit info) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2008-2030

creationtimestamp| type| source ---|---|--- 2008-04-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31698...

Code injection

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via 1 an empty SIP message or 2 a SIP INVITE message with a malformed To header, different vectors than CVE-2007-4553...

CVE-2007-4753

The CVE-2007-4753 family affects the Thomson ST 2030 SIP phone running software 1.52.1. It allows remote DoS (device hang) via SIP message parsing issues: (a) an empty SIP message and (b) a SIP INVITE with a malformed To header, with vectors distinct from CVE-2007-4553. Related CVE-2007-4553 desc...

Code injection

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via an INVITE message with a Via header that contains a '/' slash instead of the required space following the SIP version number...

CVE-2007-4553

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via an INVITE message with a Via header that contains a '/' slash instead of the required space following the SIP version number...

Thomson SpeedTouch 2030 - SIP Empty Message Remote Denial of Service

Thomson SpeedTouch 2030 - SIP Empty Message Remote Denial of Service source: https://www.securityfocus.com/bid/25464/info Thomson SpeedTouch 2030 is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages. Exploiting this issue allows...

Thomson ST 2030 SIP phone DoS

Crash on invalid INVITE request Via: and To: headers and also on empty message...

CVE-2007-4553

CVE-2007-4553 affects Thomson ST 2030 SIP phone running software 1.52.1. The issue is a denial-of-service caused by processing a malformed SIP INVITE where the Via header contains a '/' in place of the required space after the SIP version number. This header parsing defect can cause the device to...

Thomson SpeedTouch 2030 - SIP Empty Message Remote Denial of Service

source: https://www.securityfocus.com/bid/25464/info Thomson SpeedTouch 2030 is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages. Exploiting this issue allows remote attackers to cause the device to stop responding, thus denying...

[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using the TO Header

MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH9 Synopsis After sending a message where the TO URI field is crafted, the device looks functional but in fact does not respond to any event provoking...

Thomson SIP phone ST 2030 Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================== Thomson SIP phone ST 2030 Remote Denial of Service Exploit ========================================================== !/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It...

Thomson SpeedTouch ST 2030 (SIP Phone) - SIP Invite Message Remote Denial of Service

Thomson SpeedTouch ST 2030 SIP Phone - SIP Invite Message Remote Denial of Service source: https://www.securityfocus.com/bid/25446/info Thomson SpeedTouch 2030 is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages. Exploiting this...

Thomson SpeedTouch ST 2030 (SIP Phone) - Remote Denial of Service

!/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It provokes a DoS in the device. use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia: SIP/2.0/UDP...

Thomson SpeedTouch ST 2030 (SIP Phone) - SIP Invite Message Remote Denial of Service

source: https://www.securityfocus.com/bid/25446/info Thomson SpeedTouch 2030 is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages. Exploiting this issue allows remote attackers to cause the device to stop responding, thus denying...

CVE-2007-2030

The CVE-2007-2030 issue affects the lha LHA tool, specifically the lharc.c code, which does not securely create temporary files. This could allow a local attacker to read or write files by creating a file before LHA is invoked. Affected component: lharc.c in lha (no vendor/versions specified in t...

Ultimate PHP Board users.dat Multiple Vulnerabilities

The remote host is running Ultimate PHP Board UPB. The remote version of this software is prone to a weak password encryption vulnerability and may store the users.dat file under the web document root with insufficient access control. %NASLMINLEVEL 70300 This script was written by Josh...

CVE-2002-2030

The CVE-2002-2030 entry affects SQLData Enterprise Server 3.0 and is a stack-based buffer overflow. The vulnerability allows a remote attacker to send a long HTTP request to trigger the overflow, with the impact of executing arbitrary code and causing a denial of service. The available connected ...

CVE-2005-2030

Ultimate PHP Board UPB 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat...