AgePhone software SIP IP phone buffer overflow

Buffer overflow on SIP packet parsing...

Authentication flaw

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0374

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0375

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol NTP server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks...

CVE-2006-0374

The CVE-2006-0374 entry applies to Advantage Century Telecommunication (ACT) P202S IP Phone firmware 1.1.21 (software version 1.01.21). The vulnerability involves multiple undocumented ports that could be abused: (1) access to VxWorks WDB remote debugging ONCRPC (wdbrpc) over UDP 17185, potential...

CVE-2006-0374

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0375

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol NTP server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks...

CVE-2006-0360

The CVE-2006-0360 entry affects the MPM SIP HP-180W Wireless IP Phone WE.00.17. An unauthenticated remote access path exists via UDP port 9090 (undocumented), enabling potential exposure of sensitive information and a possible denial of service. The description specifies no authentication require...

CVE-2006-0360

MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...

CVE-2006-0375

The CVE-2006-0375 entry applies to Advantage Century Telecommunication (ACT) P202S IP Phone, running firmware 1.1.21 on VxWorks. The issue is a hardcoded NTP server (Taiwan) that could let an attacker supply false time, block time information, or perform related attacks. The available connected d...

CVE-2006-0374: Improper Authentication

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0360: Undefined Security Weakness

MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...

CVE-2006-0375: Undefined Security Weakness

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol NTP server in Taiwan, which could allow remote attackers to provide false time information, block access to time information, or conduct other attacks...

CounterPath eyeBeam software SIP IP Phone DoS

Buffer overflow on oversized SIP packet header name...

[SA18479] Cisco IP Phones SYN Flood Device Reload Vulnerability

TITLE: Cisco IP Phones SYN Flood Device Reload Vulnerability SECUNIA ADVISORY ID: SA18479 VERIFY ADVISORY: http://secunia.com/advisories/18479/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Cisco IP Phone 7900 Series http://secunia.com/product/2809/ SOFTWARE: Cis...

CVE-2006-0179

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

Code injection

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

CVE-2006-0179

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

CVE-2006-0179

The CVE-2006-0179 issue affects Cisco IP Phone 7940. It describes a remote denial-of-service where an attacker can cause a reboot by sending a large volume of TCP SYN packets to arbitrary ports, with a demonstration targeting port 80. Connected documents corroborate the reboot-based DoS vector vi...

CVE-2006-0179: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...