114 matches found
CVE-2006-0179
The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...
CVE-2006-0179
The CVE-2006-0179 issue affects Cisco IP Phone 7940. It describes a remote denial-of-service where an attacker can cause a reboot by sending a large volume of TCP SYN packets to arbitrary ports, with a demonstration targeting port 80. Connected documents corroborate the reboot-based DoS vector vi...
CVE-2006-0179: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...
Cisco IP Phone 7940 - Reboot (Denial of Service)
Cisco IP Phone 7940 - Reboot Denial of Service !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not...
Cisco IP Phone 7940 - Reboot (Denial of Service)
!/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not private anymore. Vulnerable phones are running ver...
CVE-2005-2181
Cisco 7940/7960 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...
CVE-2005-2181: Improper Verification of Cryptographic Signature
Cisco 7940/7960 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...
PT-2005-3110 · Cisco · Cisco 7940/7960
Name of the Vulnerable Software and Affected Versions: Cisco 7940/7960 Voice over IP VoIP phones affected versions not specified Description: The issue concerns the improper validation of certain values in a NOTIFY message, which can be exploited by remote attackers to spoof messages. This could...
Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling
Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The...
CVE-2003-1109: Undefined Security Weakness
The Session Initiation Protocol SIP implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages...
CVE-2002-0881
The CVE-2002-0881 entry affects Cisco IP Phone (VoIP) models 7910, 7940, and 7960. The underlying issue is the use of a default administrative password, enabling attackers with physical access to the phone to modify configuration settings. Connected documents corroborate the vulnerable components...
CVE-2002-0882: Undefined Security Weakness
The web server for Cisco IP Phone VoIP models 7910, 7940, and 7960 allows remote attackers to cause a denial of service reset and possibly read sensitive memory via a large integer value in 1 the stream ID of the StreamingStatistics script, or 2 the port ID of the PortInformation script...
CVE-2002-0881: Undefined Security Weakness
Cisco IP Phone VoIP models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings...
CVE-2002-0880: Undefined Security Weakness
Cisco IP Phone VoIP models 7910, 7940, and 7960 allow remote attackers to cause a denial of service crash via malformed packets as demonstrated by 1 "jolt", 2 "jolt2", 3 "raped", 4 "hping2", 5 "bloop", 6 "bubonic", 7 "mutant", 8 "trash", and 9 "trash2."...