8 matches found
Authentication flaw
The Cisco Unified IP Phone 7960G 9.21 and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List CTL file, aka Bug ID CSCuj66795...
CVE-2014-0737
Cisco CVE-2014-0737 affects the Cisco Unified IP Phone 7960G (9.2(1) and earlier). The root issue is insufficient CTL (Certificate Trust List) validation, allowing remote attackers to bypass authentication and inject a crafted CTL file to change trust relationships, enabling control over trusted ...
PT-2014-3801
Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phone 7960G versions 9.21 and earlier Description The issue allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List CTL file. Recommendations For Cisco Unified IP...
CVE-2014-0737: Improper Authentication
The Cisco Unified IP Phone 7960G 9.21 and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List CTL file, aka Bug ID CSCuj66795...
CVE-2008-0531: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message...
CVE-2008-0528: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data...
CVE-2008-0526: Improper Input Validation
Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service reboot via a long ICMP echo request ping packet...
CVE-2008-0530: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response...