Design/Logic Flaw

Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce...

CVE-2008-4999

The CVE-2008-4999 entry concerns Nortel Networks UNIStim IP Phone 0604DAS and a remote denial-of-service via oversized ICMP packets (ping of death). Public sources confirm the effect is a crash from long ping payloads; however, reproducibility is inconsistent (the issue could not be reliably repr...

CVE-2008-4999

Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce...

T-Mobile G1 phone Google Android protection bypass

Pplication can run telnetd with root privileges...

CVE-2008-4875

Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. dot dot in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access ...

CVE-2008-4874

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

CVE-2008-4876

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

Design/Logic Flaw

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

Directory traversal

Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. dot dot in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access ...

CVE-2008-4874

CVE-2008-4874 concerns Philips Electronics VOIP841 DECT Phone firmware 1.0.4.50 and 1.0.4.80, which allegedly contains a back door account named “service” with password “service,” enabling remote access. The incident is documented across multiple sources (NVD/CVE records) and described as a backd...

CVE-2008-4874

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

CVE-2008-4876

The CVE-2008-4876 entry concerns an XSS vulnerability in the web server component of Philips Electronics VOIP841 DECT Phone. Affected firmware versions 1.0.4.50 and 1.0.4.80 allow remote attackers to inject arbitrary web script or HTML via the request URL because it is not properly sanitized in t...

CVE-2008-4875

Philips Electronics VOIP841 DECT Phone web server (firmware 1.0.4.50 and 1.0.4.80) is subject to a directory traversal vulnerability via a .. in GET requests, allowing remote authenticated users to read arbitrary files. The issue is documented as CVE-2008-4875. It is noted that this can be levera...

CVE-2008-4876

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

Avaya IP Office Phone Manager Local Password Disclosure Exploit

No description provided by source. include windows.h include stdio.h include string.h / Filename: exploit.c Title: Avaya IP Office Phone Manager - Cleartext Sensitive Data Vulnerability Exploit v0.01 Author: pagvac Adrian Pastor Date: 24th Feb, 2005 Other info: tested on version 2.013. Compile as...

Hitachi IP Phone Detection

Binary data 4683.prm...

Default Password (000000) for 'admin' on WIP5000 IP Phone

The remote host is a WIP5000 VOIP phone. The remote host has the default password set for the 'admin' user '000000'. An attacker may connect to it and reconfigure it using this account. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34217; scriptversion"1.15";...

Default Password (0000) for 'user' on WIP5000 IP Phone

The remote host is a WIP5000 VOIP phone. The remote host has the default password set for the 'user' user '0000'. An attacker may connect to it and get useful information about the phone book of the remote phone using this account. C Tenable Network Security, Inc. include"compat.inc"; if...

DEBIAN-CVE-2008-3903

Asterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and 1.6.0.x before 1.6.0.8; Asterisk Business Edition A.x.x, B.x.x before B.2.5.8, C.1.x.x before C.1.10.5, and C.2.x.x before C.2.3.3; s800i 1.3.x before 1.3.0.2; and Trixbox PBX 2.6.1, when Digest authentication and authalwaysreje...