Nortel Networks多个UNIStim VoIP产品远程窃听漏洞

Nortel IP Phones是一款IP电话应用方案。 Nortel IP Phones存在设计错误，远程攻击者可以利用漏洞对设备进行窃听，导致敏感信息泄露。 如果正确的UNIStim消息发送给IP电话，IP电话可进入surveillance模式，UNIStim消息ID必须匹配信号服务器和IP电话间的可预期ID，协议使用16位大小作为ID数字，如果恶意用户发送65536个所有可能ID号的伪造UNIStim消息，可导致消息被窃听，造成敏感信息泄露。 Nortel Networks Universal Access - IP 0 Nortel Networks Survivable...

Nortel Unistream IP Phone / Softphone / Communication Server multiple security vulnerabilities

Buffer overflow, eavesdroping. multiple DoS conditions...

Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities

source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone. This will allow attackers to...

Web Server Transmits Cleartext Credentials

The remote web server contains several HTML form fields containing an input of type 'password' which transmit their information to a remote web server in cleartext. An attacker eavesdropping the traffic between web browser and server may obtain logins and passwords of valid users. C Tenable Netwo...

CVE-2007-4498

The CVE-2007-4498 entry affects the Grandstream GXV-3000 SIP Phone (firmware 1.0.1.7; Loader 1.0.0.6; Boot 1.0.0.18). It describes a vulnerability where remote attackers can force silent call completion, eavesdrop on the phone’s local environment, and cause a denial of service (blocked call recep...

grandstream-sip.txt

While playing with the SIP Madynes stateful fuzzer for a description see http://hal.inria.fr/inria-00166947/en, we have realized that some SIP stack engines have serious bugs allowing to an attacker to automatically make a remote phone accept the call without ringing and without asking the user t...

[Full-disclosure] Remote eavesdropping with SIP Phone GXV-3000

While playing with the SIP Madynes stateful fuzzer for a description see http://hal.inria.fr/inria-00166947/en, we have realized that some SIP stack engines have serious bugs allowing to an attacker to automatically make a remote phone accept the call without ringing and without asking the user t...

Grandstream GXV-3000 SIP Phone eavesdropping

It's possible to take the phone off hook without user intervention...

CVE-2006-6898

Widcomm Bluetooth for Windows BTW before 4.0.1.1500 allows remote attackers to listen to and record conversations, aka the CarWhisperer attack...

CVE-2005-4417

The default configuration of Widcomm Bluetooth for Windows BTW 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote...

CVE-2005-4417

The default configuration of Widcomm Bluetooth for Windows BTW 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote...

CVE-2005-4417

The CVE-2005-4417 issue affects Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed with Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500. The default configuration leaves Authentication and Authorization values null, enabling remote at...

DMA[2005-1214a] - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping'

DMA2005-1214a - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping' Author: Kevin Finisterre Vendor: http://www.widcomm.com, http://www.broadcom.com/products/Bluetooth/ Product: 'versions = BTW 4.0.1.1500 ?' References: http://www.digitalmunition.com/DMA2005-1214a.txt Description: Wh...

CVE-2005-3892

Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone...

CVE-2005-3892

Gadu-Gadu 7.20 is affected by CVE-2005-3892 due to an EasycallLite.oce ActiveX control that can be loaded by a web page to initiate an outgoing call and listen to the microphone, allowing remote eavesdropping. Affected product/version: Gadu-Gadu 7.20. Root cause involves the ActiveX control enabl...

CVE-2005-3892

Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX control, which can initiate an outgoing phone call and listen to the microphone...

Detect SWAT server port

SWAT Samba Web Administration Tool is running on this port. SWAT allows Samba users to change their passwords, and offers to the sysadmin an easy-to-use GUI to configure Samba. However, it is not recommended to let SWAT be accessed by the world, as it allows an intruder to attempt to brute force...

X11 Server Unauthenticated Access

The remote X11 server accepts connections from anywhere. An attacker can connect to it to eavesdrop on the keyboard and mouse events of a user on the remote host. It is even possible for an attacker to grab a screenshot of the remote host or to display arbitrary programs. An attacker can exploit...

Hijacking Bluetooth Headsets for Fun and Profit?

Hijacking Bluetooth Headsets for Fun and Profit? kfatdigitalmunitiondotcom http://www.digitalmunition.com/HijackHeadSet.txt A few years ago when I worked for SNOSoft my business partner 'Simon' was one of those guys who rocked out a Bluetooth Headset just about every time I talked to him on his...

Google Secure Access VPN Client Installed

The remote host has the program 'Google Secure Access' installed. This software is a VPN client allowing roaming users to establish a VPN connection with Google's VPN server, thus protecting the local communications from being eavesdropped by a local user. This potentially allows Google to...