Cisco IP Phone SIP INVITE Message Denial of Service (CVE-2007-1542)

There exists a denial of service vulnerability in Cisco's IP phone models 7960 and 7940. The affected firmware cannot handle a specially crafted SIP INVITE message with an invalid IP address, causing the phone to reboot upon receiving the message. As a result, a remote user can cause a denial of...

Microsoft IIS Phone Book Service Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...

Federal Wiretaps Busted by Researchers

Researchers at the University of Pennsylvania say they’ve discovered a way to circumvent the networking technology used by law enforcement to tap phone lines in the U.S.The flaws they’ve found “represent a serious threat to the accuracy and completeness of wiretap records used for both criminal...

Internet Phone Systems Become Fraudster's Tool

Cybercriminals have found a new launching pad for their scams: the phone systems of small and medium-sized businesses across the U.S. In recent weeks, they have hacked into dozens of telephone systems across the country, using them as a way to contact unsuspecting bank customers and trick them in...

Google Voice Mails Found In Public Search Engine

Google Voice Mails have been discovered in Google’s search engine, providing audio files, names, and phone number as if you were logged in and checking your own voice mail. Some appear to be test messages, while others are clearly not. The Boy Genius Report explains: After entering...

About mobile phone SIM card vulnerability-vulnerability warning-the black bar safety net

The SIM card also the presence of vulnerability? Can't believe? This is the mobile giant's products, and today I on the Blog will put this BUG simple a description! One day in order to quickly store a phone number with a simple“!” As the storage name in quotes ignored, dbtel phone storage, but to...

Swiss Coder Publicises Government Spy Trojan

A software engineer who created Trojans for the Swiss authorities to intercept Voice-over-IP VoIP phone calls has published the source code to his programs in order to draw attention to the surveillance threat posed by such software. Read the full story idg.no...

3CX Phone System login.php Multiple Parameter XSS

3CX Phone System for Windows, a software-based IP PBX, is installed on the remote host. The installed version fails to sanitize input to the 'fName' and 'fPassword' parameters in 'login.php' before using it to generate an HTML response dynamically. An unauthenticated remote attacker may be able t...

CVE-2008-6895

3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service unstable service or crash via unspecified vectors, as demonstrated by vulnerability scans from Nessus or SAINT...

CVE-2008-6896

login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows remote attackers to gain sensitive information via unspecified vectors that reveal the installation path...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fName and 2 fPassword parameters...

Path traversal

login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows remote attackers to gain sensitive information via unspecified vectors that reveal the installation path...

CVE-2008-6894

3CX Phone System for Windows (Free Edition) versions 6.1793 and 6.0.806.0 are affected by multiple XSS in login.php, exploitable via the fName and fPassword parameters. The underlying issue is insufficient input sanitization that allows an unauthenticated remote attacker to inject arbitrary HTML/...

CVE-2008-6895

CVE-2008-6895 affects 3CX Phone System 6.0.806.0. The vulnerability enables remote attackers to cause a denial of service (unstable service or crash) via unspecified vectors, as demonstrated by Nessus/SAINT scans. The NVD metrics show a CVSSv2 base score of 7.8 (HIGH) with network access, no auth...

CVE-2008-6895

3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service unstable service or crash via unspecified vectors, as demonstrated by vulnerability scans from Nessus or SAINT...

CVE-2008-6896

CVE-2008-6896 affects the 3CX Phone System (version 6.0.806.0). When disk usage reaches 100%, remote attackers can obtain sensitive information that reveals the installation path through unspecified vectors. The exact root cause is not detailed in the provided documents. Impact is described as pa...

CVE-2008-6894

Multiple cross-site scripting XSS vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fName and 2 fPassword parameters...

CVE-2008-6896

login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows remote attackers to gain sensitive information via unspecified vectors that reveal the installation path...

DECT cordless telephone security test-use-vulnerability warning-the black bar safety net

Disclaimer: This article tests the use of the DECT phone are has himself, strongly opposed any who used to be discord, or even break the law.! Just use the "hack DECT cordless phone" as keyword Google the following. Found this 2 articles: hack crack DECT cordless telephone security system...

iPhone Safari Phone Auto Dial

Released since Apple published the iPhone 3.0 security fixes. Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Apple www.apple.com Device: iPhone 3G iPhone 1st Gen Firmware: 2.1 possible earlier versions Device Type: smart phone Subsystems: Safari and mobile telephony...