CVE-2007-5469

OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID aka "toll fraud and authentication forward attack". NOT...

CVE-2007-5468: Undefined Security Weakness

Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID aka "toll fraud and authentication...

CVE-2007-5469: Undefined Security Weakness

OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID aka "toll fraud and authentication forward attack". NOT...

CVE-2007-5468

Cisco CallManager 5.1.1.3000-5 is vulnerable because it does not verify the Digest authentication header URI against the SIP Request URI. This allows remote attackers to use sniffed Digest credentials to place arbitrary calls or spoof caller ID (toll fraud and authentication forward attack). The ...

Design/Logic Flaw

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID...

CVE-2007-3347

The CVE-2007-3347 entry concerns the D-Link DPH-540/DPH-541 SIP phones. The issue is that these phones accept SIP INVITE messages that originate outside the Call Server’s IP, enabling remote attackers to initiate arbitrary SIP communication with the device. A demonstrated effect is communication ...

CVE-2007-3347

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID...

Multiple phone systems unauthorized voice mail access

Spoofable Caller ID CNID is used for access authentication...

Design/Logic Flaw

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...

Design/Logic Flaw

T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...

CVE-2007-1821

Sprint Nextel Sprint voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...

CVE-2007-1822

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...

CVE-2007-1820

CVE-2007-1820 affects Nortel Networks CallPilot and Meridian Mail voicemail systems when auto logon is enabled. A remote attacker can spoof Caller ID (CNID) to access, retrieve, or delete messages and reconfigure the mailbox. The vulnerability is documented with a high-severity CVSS v2 score (9.3...

CVE-2007-1822

Alcatel-Lucent Lucent Technologies voice mail systems are affected by CVE-2007-1822. The vulnerability arises from spoofing the Calling Number Identification (CNID) used for access authentication, allowing remote attackers to retrieve or remove messages or reconfigure mailboxes. The connected doc...

CVE-2007-1823

CVE-2007-1823 affects T-Mobile voice mail systems, where remote attackers can retrieve or remove messages or reconfigure mailboxes by spoofing CNID (Caller ID). The vulnerability stems from CNID-based authentication allowing remote abuse, leading to complete confidentiality, integrity, and availa...

CVE-2007-1821

CVE-2007-1821 involves Sprint Nextel sprint voice mail systems where remote attackers can spoof Calling Number Identification (CNID) to gain access to voicemail. The underlying issue is CNID spoofing used for authentication, enabling unauthorized retrieval or removal of messages and reconfigurati...

Voice mail systems allow administrative access based on Caller ID

Overview Certain voice mail systems trust Calling Number Identification CNID, Caller ID to authenticate administrative access to voice mail accounts. Caller ID can be easily spoofed, allowing an attacker to gain control over a vulnerable voice mailbox. Description Some voice mail systems use Call...

SIP Invite Spoof

This module will create a fake SIP invite request making the targeted device ring and display fake caller id information. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Invite Spoof',...

CVE-2002-1391

The CVE-2002-1391 issue affects mgetty prior to 1.1.29, where a buffer overflow in the internal handling of Caller ID CallerName could allow a remote attacker to cause a Denial of Service and potentially execute arbitrary code via a long Caller Name. The vulnerability is documented in multiple ad...

CVE-2002-1391

Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument...