Code injection

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

CVE-2009-0632

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

CVE-2009-0632

CVE-2009-0632 affects Cisco Unified Communications Manager (CUCM) IP Phone Personal Address Book (PAB) Synchronizer. The vulnerability leaks privileged directory-service credentials to the client during PAB sync, allowing an attacker who intercepts credentials to modify CUCM configuration and esc...

Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability Advisory ID: cisco-sa-20090311-cucmpab Revision 1.0 For Public Release 2009 March 11 1600 UTC GMT...

Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Unified IP Phone 7960G and 7940G (SIP) RTP Header Vulnerability

Title: ------ Cisco Unified IP Phone 7960G and 7940G SIP RTP Header Vulnerability Summary: -------- The Cisco Unified IP Phone 7960G and 7940G SIP do not correctly parse some malformed RTP headers leading to a deterministic denial of service Assigned CVE: ------------- CVE-2008-4444 Details:...

Cisco Unified IP Phone 7960G and 7940G RTP远程拒绝服务漏洞

BUGTRAQ ID: 33264 CVE ID：CVE-2008-4444 CNCVE ID：CNCVE-20084444 Cisco Unified IP Phone是思科的统一IP电话解决方案。 Cisco Unified IP Phone 7960G和7940G不正确解析部分畸形RTP头字段数据，远程攻击者可以利用漏洞对电话机进行拒绝服务攻击。 SIP协议用于在电话中设置呼叫，一旦呼叫建立，媒体内容由RTP协议承接，远程攻击者可以发送特殊构建的RTP报文时电话重启。 Cisco Unified IP Phone 7960G Cisco Unified IP Phone 7940G...

CVE-2008-4999

Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce...

Design/Logic Flaw

Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce...

CVE-2008-4999

The CVE-2008-4999 entry concerns Nortel Networks UNIStim IP Phone 0604DAS and a remote denial-of-service via oversized ICMP packets (ping of death). Public sources confirm the effect is a crash from long ping payloads; however, reproducibility is inconsistent (the issue could not be reliably repr...

CVE-2008-4999

Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce...

Hitachi IP Phone Detection

Binary data 4683.prm...

Default Password (0000) for 'user' on WIP5000 IP Phone

The remote host is a WIP5000 VOIP phone. The remote host has the default password set for the 'user' user '0000'. An attacker may connect to it and get useful information about the phone book of the remote phone using this account. C Tenable Network Security, Inc. include"compat.inc"; if...

Default Password (000000) for 'admin' on WIP5000 IP Phone

The remote host is a WIP5000 VOIP phone. The remote host has the default password set for the 'admin' user '000000'. An attacker may connect to it and reconfigure it using this account. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34217; scriptversion"1.15";...

Linksys SPA-2102 wireless IP phones DoS

Large ICMP packets cause device to crash...

Cisco IP Phone 7921不安全PEAP实现漏洞

BUGTRAQ ID: 27935 Cisco 7921是一部无线的IP电话。 Cisco IP Phone 7921认证机制实现上存在漏洞，远程攻击者可能利用此漏洞获取口令相关的信息。 如果将Cisco 7921 IP电话配置为使用PEAP （MS-CHAPv2）的话，就不会验证服务器证书。如果恶意用户建立了恶意的接入点且RADIUS后端的签名数字证书声明与客户端使用相同证书的话，由于客户端不会检查签名，因此就会认为正在与可信任的服务器通讯，可能会向服务器发送哈希口令或PIN。 Cisco IP Phone 7921 厂商补丁： Cisco -----...

Nortel IP Phone DoS

Nortel IP phone DoS Discovered: 2008-02-25 Tested on firmware: 0604DAS Latest firmwares have also been tested. Welcome the return of the Ping of Death! wait a minute...isn't this 2008? Steps to reproduce: 1. ping -s 65500 ip of the phone Thanks to Spithash and the [email protected] crew...

Nortel IP Phone DoS

Large fragmented ICMP packet causes device to crash...

Nortel UNIStim IP Phone - Remote Ping Denial of Service

Nortel UNIStim IP Phone - Remote Ping Denial of Service source: https://www.securityfocus.com/bid/28004/info Nortel UNIStim IP Phone products are prone to a remote denial-of-service vulnerability because the software fails to properly handle unexpected network datagrams. Successfully exploiting...

Nortel UNIStim IP Phone - Remote Ping Denial of Service

source: https://www.securityfocus.com/bid/28004/info Nortel UNIStim IP Phone products are prone to a remote denial-of-service vulnerability because the software fails to properly handle unexpected network datagrams. Successfully exploiting this issue allows remote attackers to crash affected...