DEBIAN-CVE-2005-3539

Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via 1 the notify script in HylaFAX 4.2.0 to 4.2.3 and 2 crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3...

flysprayXSS.txt

Flyspray "The bug killer" multiple variable Cross-Site Scripting vendor url:http://flyspray.rocks.cc/ Vendor specific bug report: http://flyspray.rocks.cc/bts/task/703 Advisore:http://lostmon.blogspot.com/2005/10/ flyspray-bug-killer-multiple-variable.html vendor notify:yes exploit available:yes...

CVE-2005-3095

CVE-2005-3095 concerns the Avi Alkalay notify program (dated 19 Aug 2001). The available documents indicate that remote attackers could execute arbitrary commands by injecting shell metacharacters into the from parameter. CVSS metrics (NVD) specify a Network attack vector with Low complexity, no ...

dvbbsXSS.txt

DVBBS Multiple variable Cross site scripting vendor url:http://down.dvbbs.net/ SoftView/SoftView2455.html Advisory:http://lostmon.blogspot.com/2005/08/ dvbbs-multiple-variable-cross-site.html vendor notify:yes exploit available:yes OSVDB ID:18512 DVBBS contains a flaw that allows a remote cross...

quickForum.txt

Quick.Forum 'topic field' XSS and 'page' & 'iCategory' SQL injection vendor url:http://qc.dotgeek.org/os/index.php?p=productsQuickForum advisore:http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html vendor notify: yes exploit available: yes Quick.Forum contais a flaw which...

bmforumXSS.txt

Multiple Cross site scripting in BMForum vendor url:http://www.bmforum.com/ Advisore:http://lostmon.blogspot.com/2005/07/ multiple-cross-site-scripting-in.html Vendor notify:yes Exploit available:yes BMForum contains a flaw that allows a remote cross site scripting attack.This flaw exists because...

cleverXSS.txt

Clever copy 'calendar.php' 'yr' variable cross site scripting vendor url:http://clevercopy.bestdirectbuy.com advisory:http://lostmon.blogspot.com/2005/07/ clever-copy-calendarphp-yr-variable.html vendor notify: yes exploit available:yes Clever Copy is a free, fully scalable web site portal and ne...

CVE-2005-2181

Cisco 7940/7960 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...

CVE-2005-2182

The affected product is Grandstream BudgeTone BT100 VoIP phones. The vulnerability arises from improper validation of Call-ID, branch, and tag values in NOTIFY messages used to verify subscriptions, enabling remote spoofing of messages such as the “Messages waiting” indicator. Root cause: inadequ...

CVE-2005-2181

Cisco 7940/7960 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...

CVE-2005-2182

Grandstream BudgeTone BT 100 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...

PT-2005-3110 · Cisco · Cisco 7940/7960

Name of the Vulnerable Software and Affected Versions: Cisco 7940/7960 Voice over IP VoIP phones affected versions not specified Description: The issue concerns the improper validation of certain values in a NOTIFY message, which can be exploited by remote attackers to spoof messages. This could...

PT-2005-3111 · Grandstream · Grandstream Budgetone (Bt) 100

Name of the Vulnerable Software and Affected Versions: Grandstream BudgeTone BT 100 affected versions not specified Description: The issue concerns the Grandstream BudgeTone BT 100 Voice over IP VoIP phones, which do not properly validate certain values in a NOTIFY message. This allows remote...

VoIP-Phones: Weakness in proccessing SIP-Notify-Messages

Tele-Consulting GmbH security | networking | training advisory 05/07/06 URL of this advisory: http://pentest.tele-consulting.com/advisories/050706voip-phones.txt Topic: Weakness in implemenation of proccessing SIP-Notify-Messages in VoIP-Phones. Summary: Due to ignoring the value of 'Call-ID' and...

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling

source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The issue arises because the affected phones do not verify the 'Call-ID...

CVE-2005-1825

CVE-2005-1825 involves multiple stack-based buffer overflows in the nvd_exec function of HP Radia Notify Daemon (3.1.2.0, and other versions 2.x/3.x/4.x). The vulnerability allows remote attackers to execute arbitrary code by sending a crafted command to a RADEXECD process. This is a network-acce...

CVE-2005-1826

Buffer overflow in HP Radia Notify Daemon 3.1.0.0 formerly by Novadigm, and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a long file extension...

CVE-2005-1826

CVE-2005-1826 affects HP Radia Notify Daemon (versions 2.x, 3.x, 4.x; formerly Novadigm) where a buffer overflow via a long file extension allows a remote attacker to execute arbitrary code. The description specifies remote code execution but does not provide exploit code or in-the-wild details. ...

HP OpenView Radia 2.03.14.0 - Notify Daemon Multiple Remote Buffer Overflow Vulnerabilities

HP OpenView Radia 2.03.14.0 - Notify Daemon Multiple Remote Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/13835/info HP OpenView Radia Notify Daemon RADEXECD is affected by multiple remote buffer overflow vulnerabilities. An attacker can craft a malicious request that...

CVE-2005-1825

Multiple stack-based buffer overflows in the nvdexec function in HP Radia Notify Daemon 3.1.2.0 formerly by Novadigm, and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process...