CVE-2007-1590

The CVE-2007-1590 issue affects the Grandstream BudgeTone 200 IP phone (program 1.1.1.14, bootloader 1.1.1.5). A remote attacker can trigger a denial of service (device crash) by sending SIP messages (INVITE, CANCEL, or others) containing a WWW-Authenticate header with a crafted Digest domain, as...

Grandstream Budge Tone-200 IP Phone - Digest domain Denial of Service

Grandstream Budge Tone-200 IP Phone - Digest domain Denial of Service !/usr/bin/perl MADYNES Security Advisory http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware:...

Grandstream Budge Tone-200 IP Phone (Digest domain) DoS Exploit

Exploit for hardware platform in category dos / poc =============================================================== Grandstream Budge Tone-200 IP Phone Digest domain DoS Exploit =============================================================== !/usr/bin/perl MADYNES Security Advisory...

CVE-2006-5231

Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service hang or reboot via a large amount of ASCII data sent to port 1 5060/UDP, 2 5062/UDP, 3 5064/UDP, 4 5066/UDP, 5 9876/UDP, or 6 26789/UDP...

CVE-2006-5231

CVE-2006-5231 affects the Grandstream GXP-2000 VoIP Desktop Phone (firmware 1.1.0.5). The vulnerability allows remote attackers to cause a denial of service (hang or reboot) by sending a large amount of ASCII data to UDP ports 5060, 5062, 5064, 5066, 9876, or 26789. The impact is described as ava...

CVE-2006-5231

Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service hang or reboot via a large amount of ASCII data sent to port 1 5060/UDP, 2 5062/UDP, 3 5064/UDP, 4 5066/UDP, 5 9876/UDP, or 6 26789/UDP...

CVE-2005-2581

Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to cause a denial of service device hang or reboot via a large UDP packet to port 5060...

CVE-2005-2581

Technical details (affected product, vulnerable component, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates from official CVE records and security advisories.

Grandstream Budge Tone 101/102 DoS Vulnerability

------------------------------------------------------------------- SySS-Advisory: Grandstream Budge Tone 101/102 DoS Vulnerability - ------------------------------------------------------------------- Problem discovered: July 20th 2005 Vendor contacted: July 21th 2005 Advisory will published on:...

Grandstream Budge Tone IP phone DoS

Large datagrame to UDP/5060 port causes device to hang...

grandstream-DoS.pl.txt

!/usr/bin/perl use IO::Socket; use Term::ANSIColor; U S A G E system "clear"; print "\nGrandstream BT101/BT102 DoS\n"; print "written by pierre kroma [email protected]\n\n"; if !$ARGV2 print qq Usage: perl grandstream-DoS.pl -s -r/-s = ;- = 5060 -r = 'reboot' the Grandstream BT 101/102 -s = 'shutdown...

Grandstream Budge Tone 101/102 VOIP Phone - Denial of Service

!/usr/bin/perl use IO::Socket; use Term::ANSIColor; U S A G E system "clear"; print "\nGrandstream BT101/BT102 DoS\n"; print "written by pierre kroma [email protected]\n\n"; if !$ARGV2 print qq Usage: perl grandstream-DoS.pl -s -r/-s = ;- = 5060 -r = 'reboot' the Grandstream BT 101/102 -s = 'shutdown...

Grandstream Budge Tone 101/102 VOIP Phone Denial of Service Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; use Term::ANSIColor; U S A G E system "clear"; print "\nGrandstream BT101/BT102 DoS\n"; print "written by pierre kroma [email protected]\n\n"; if !$ARGV2 print qq Usage: perl grandstream-DoS.pl -s ip-addr udp-port -r/-s ip-addr = ;-...

Grandstream Budge Tone 101102 VOIP Phone - Denial of Service

Grandstream Budge Tone 101102 VOIP Phone - Denial of Service !/usr/bin/perl use IO::Socket; use Term::ANSIColor; U S A G E system "clear"; print "\nGrandstream BT101/BT102 DoS\n"; print "written by pierre kroma [email protected]\n\n"; if !$ARGV2 print qq Usage: perl grandstream-DoS.pl -s -r/-s = ;- =...

Grandstream Budge Tone 101/102 VOIP Phone Denial of Service Exploit

Exploit for hardware platform in category dos / poc =================================================================== Grandstream Budge Tone 101/102 VOIP Phone Denial of Service Exploit =================================================================== !/usr/bin/perl use IO::Socket; use...

CVE-2005-2182

Grandstream BudgeTone BT 100 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...

CVE-2005-2182

Grandstream BudgeTone BT 100 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...

CVE-2005-2182

The affected product is Grandstream BudgeTone BT100 VoIP phones. The vulnerability arises from improper validation of Call-ID, branch, and tag values in NOTIFY messages used to verify subscriptions, enabling remote spoofing of messages such as the “Messages waiting” indicator. Root cause: inadequ...

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling

source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The issue arises because the affected phones do not verify the 'Call-ID...

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The...