CVE-2007-5789

The CVE-2007-5789 entry describes the Grandstream HT-488 0.1 as vulnerable to a denial-of-service via a flood of fragmented packets sent to UDP/TCP port 5060. The underlying fault is not elaborated in the provided materials beyond the consumer-facing impact (device crash) and remote exploitabilit...

CVE-2007-5788

CVE-2007-5788 affects Grandstream HT-488 (firmware 0.1) with a buffer overflow in the SIP parser. A crafted SIP INVITE message can cause a remote denial of service (device crash). Connected records confirm the same vulnerability across multiple sources, but do not provide additional technical det...

CVE-2007-5789: Undefined Security Weakness

The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a flood of fragmented packets to port 5060...

CVE-2007-5788: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

Grandstream GXV-3000 电话远程拒绝服务安全漏洞

GXV-3000是潮流科技（Grandstream）基于SIP和H.264标准的下一代高级IP视频电话。 GXV-3000在处理特定的消息序列时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 如果向GXV-3000电话发送了以下两个消息序列的话，就会导致设备拒绝服务： X ----------------------- INVITE ------------------- GXV-3000 X ------------------ 100 Trying ----------------- GXV-3000 X --------------- 180 Ringing...

Code injection

The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service blocked call reception via a certain SIP INVITE message followed by a...

CVE-2007-4498

The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service blocked call reception via a certain SIP INVITE message followed by a...

CVE-2007-4498

The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service blocked call reception via a certain SIP INVITE message followed by a...

CVE-2007-4498

The CVE-2007-4498 entry affects the Grandstream GXV-3000 SIP Phone (firmware 1.0.1.7; Loader 1.0.0.6; Boot 1.0.0.18). It describes a vulnerability where remote attackers can force silent call completion, eavesdrop on the phone’s local environment, and cause a denial of service (blocked call recep...

[Full-disclosure] Remote eavesdropping with SIP Phone GXV-3000

While playing with the SIP Madynes stateful fuzzer for a description see http://hal.inria.fr/inria-00166947/en, we have realized that some SIP stack engines have serious bugs allowing to an attacker to automatically make a remote phone accept the call without ringing and without asking the user t...

grandstream-sip.txt

While playing with the SIP Madynes stateful fuzzer for a description see http://hal.inria.fr/inria-00166947/en, we have realized that some SIP stack engines have serious bugs allowing to an attacker to automatically make a remote phone accept the call without ringing and without asking the user t...

Grandstream GXV-3000 SIP Phone eavesdropping

It's possible to take the phone off hook without user intervention...

CVE-2007-4498: Undefined Security Weakness

The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service blocked call reception via a certain SIP INVITE message followed by a...

Grandstream GXV-3000 Phone - Remote Denial of Service

Grandstream GXV-3000 Phone - Remote Denial of Service source: https://www.securityfocus.com/bid/25399/info Grandstream GXV-3000 phones are prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to cause the device to accept a phone while being unable to...

Grandstream GXV-3000 Phone - Remote Denial of Service

source: https://www.securityfocus.com/bid/25399/info Grandstream GXV-3000 phones are prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to cause the device to accept a phone while being unable to hang up. This effectively denies service to legitimate...

[Full-disclosure] Grandstream Budge Tone-200 denial of service vulnerability

MADYNES Security Advisory http://madynes.loria.fr/ http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware: Grandstream Budge Tone-200 IP Phone...

grandstream-dos.txt

MADYNES Security Advisory http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware: Grandstream Budge Tone-200 IP Phone http://www.grandstream.com/consumerphones.html Affected...

Grandstream Budge Tone VOIP phones DoS

Crash on SIP protocol INVITE message parsing...

Grandstream Budge Tone-200 IP Phone (Digest domain) DoS Exploit

No description provided by source. !/usr/bin/perl MADYNES Security Advisory http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware: Grandstream Budge Tone-200 IP Phone...

Design/Logic Flaw

The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service device crash via SIP 1 INVITE, 2 CANCEL, or unspecified other messages with a WWW-Authenticate header containing a crafted Digest domain...