[Full-disclosure] Cisco Phone 7940 remote DOS

Cisco 7940 Denial of Service Vulnerability Hardware: Cisco 7940 SIP Phone Severity: High – Denial of Service Software: Affected version: P0S3-08-7-00 Other Versions: May be Notification: Vulnerability found: 30 August 2007 Contact Cisco: 31 August 2007 Tracked issue: 11 September 2007 Vulnerabili...

Cisco Phone 7940 Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================= Cisco Phone 7940 Remote Denial of Service Exploit ================================================= !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student...

Code injection

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.70, allows remote attackers to cause a denial of service device reboot via 1 a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or 2 a certain invalid SIP INVITE message that contains a remote...

CVE-2007-4459

Cisco IP Phone CVE-2007-4459 affects the 7940/7960 series with firmware up to P0S3-08-6-00 (and other SIP firmware before 8.7(0)). A remote, unauthenticated attacker on the voice VLAN can cause a denial of service resulting in a reboot by sending a specific sequence of malformed SIP messages (or ...

CVE-2007-4459

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.70, allows remote attackers to cause a denial of service device reboot via 1 a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or 2 a certain invalid SIP INVITE message that contains a remote...

[Full-disclosure] 10 messages SIP Remote DOS on Cisco 7940 SIP Phone

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 4 April, 2007 ID: KIPH6 Synopsis After sending a series of ten SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in April 2007 and...

Cisco 7940 SIP IPPhones DoS

A sequence of malformed SIP requests causes device to crash...

cisco-stateful-dos.txt

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 4 April, 2007 ID: KIPH6 Synopsis After sending a series of ten SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in April 2007 and...

[Full-disclosure] 3 messsages attack remote DOS on Cisco 7940

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 3 February, 2007 ID: KIPH5 Synopsis After sending a series of three SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in March 2007 and...

Cisco IP Phone 7940 (3 SIP messages) Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc ===================================================================== Cisco IP Phone 7940 3 SIP messages Remote Denial of Service Exploit ===================================================================== !/usr/bin/perl use IO::Socket::INET;...

Cisco IP Phone 7940 - 3 SIP Messages Remote Denial of Service

!/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia: SIP/2.0/UDP\t192.168.1.2;rport;branch=00\r\nFrom: ;tag=00\r\nTo: ;tag=00\r\nCall-ID:...

Cisco 7940/7960 Phone SIP INVITE消息远程拒绝服务漏洞

Cisco IP Phone是一套通过IP网络提供语音通信的系统。 Cisco IP Phone在处理某些畸形SIP INVITE消息时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致设备重载无法正常工作。 如果远程攻击者向设备发送了在Remote-Party-ID中包含有畸形sipURI字段的特制INVITE消息的话，就可以导致设备重载。 Cisco IP Phone 7960 Cisco IP Phone 7940 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.cisco.com/cgi-bin/tablebuild.pl/ip-7900se...

Cisco 7940 IP Phone denial of service

Crash on malformed INVITE SIP packet...

CVE-2007-1542

Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVITE request. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2007-1542

Cisco IP Phone 7940/7960 devices with firmware prior to POS8-6-0 are affected by a denial-of-service vulnerability triggered by malformed SIP INVITE messages in the Remote-Party-ID sipURI field. A remote attacker can cause the phones to reboot, leading to temporary DoS. The issue stems from error...

Cisco Phone 79407960 - SIP INVITE Remote Denial of Service

Cisco Phone 79407960 - SIP INVITE Remote Denial of Service !/usr/bin/perl Title: Cisco 7940 SIP INVITE remote DOS Date: February 19, 2007 ID: KIPH2 Synopsis: After sending a cra fted INVITE message the device immediately reboots. The phone does not check properly the sipURI field of the...

CVE-2006-0179

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

CVE-2006-0179

The CVE-2006-0179 issue affects Cisco IP Phone 7940. It describes a remote denial-of-service where an attacker can cause a reboot by sending a large volume of TCP SYN packets to arbitrary ports, with a demonstration targeting port 80. Connected documents corroborate the reboot-based DoS vector vi...

Cisco IP Phone 7940 - Reboot (Denial of Service)

!/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not private anymore. Vulnerable phones are running ver...

Cisco IP Phone 7940 - Reboot (Denial of Service)

Cisco IP Phone 7940 - Reboot Denial of Service !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not...