CVE-2008-0527

The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service reboot via a crafted HTTP request...

CVE-2008-0528

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data...

CVE-2008-0526

Cisco Unified IP Phone devices running SCCP or SIP firmware (models 7940/7940G/7960/7960G, and related variants) are affected by CVE-2008-0526, a vulnerability that allows remote attackers to reboot the phone via a large ICMP echo (ping) request. The issue is reported in Cisco advisories and vuln...

CVE-2008-0529

CVE-2008-0529 describes a buffer overflow vulnerability in the telnet server of Cisco Unified IP Phone models (7906G, 7911G, 7941G, 7961G, 7970G, 7971G) running SCCP/SIP firmware. The flaw can allow a remote authenticated attacker to trigger a overflow and execute arbitrary code via a crafted com...

CVE-2008-0529

Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command...

CVE-2008-0527

Cisco Unified IP Phone 7935/7936 (SCCP firmware) HTTP server DoS vulnerability (CVE-2008-0527) allows remote reboot via crafted HTTP requests. Impact: device restarts, potentially service disruption. Root cause: internal HTTP server handling at TCP port 80 leads to denial of service. Affected pro...

CVE-2008-0528

CVE-2008-0528 concerns Cisco Unified IP Phone models 7940/7940G/7960/7960G with SIP firmware. A buffer overflow occurs in the handling of SIP MIME boundary data, allowing a remote attacker to potentially execute arbitrary code via a crafted SIP message. Cisco’s advisory fixes SIP MIME boundary ov...

CVE-2008-0530

CVE-2008-0530 describes a buffer overflow in Cisco Unified IP Phone models 7940/7940G/7960/7960G running SCCP/SIP firmware. A specially crafted DNS response can overflow a buffer and allow remote code execution on vulnerable phones. Cisco reports fixes: DNS Response Parsing overflow resolved in S...

CVE-2008-0526

Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service reboot via a long ICMP echo request ping packet...

CVE-2008-0530

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response...

CVE-2008-0531

Cisco Unified IP Phone (7940/7940G/7960/7960G) running SIP firmware is affected by CVE-2008-0531 due to a heap overflow in the handling of SIP challenge/response messages, potentially allowing an attacker-controlled SIP proxy or MITM to trigger arbitrary code execution on a vulnerable device. Thi...

Philips VOIP841 Multiple Vulnerabilities

Secure Network - Security Research Advisory Vuln name: Philips VOIP841 Multiple Vulnerabilities Systems affected: Philips VOIP841, Firmware Version 1.0.4.50 and 1.0.4.80, Web Server Version 1.5 simple httpd Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL:...

Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2007-5583

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

Code injection

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

CVE-2007-5583

Cisco IP Phone 7940 with firmware P0S3-08-7-00 is affected by CVE-2007-5583, a denial-of-service vulnerability caused by a sequence of SIP INVITE transactions where the Request-URI lacks a user name. Remote attackers can trigger 486 Busy responses or a device reboot. The vulnerability is document...

CVE-2007-5583

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

Cisco Phone 7940 Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student Radu State Ph.D Olivier Festor Ph.D Madynes Team, LORIA - INRIA Lorraine http://madynes.loria.fr use IO::Socket::INET; use String::Random; ...

cisco7940-dos.txt

Cisco 7940 Denial of Service Vulnerability Hardware: Cisco 7940 SIP Phone Severity: High – Denial of Service Software: Affected version: P0S3-08-7-00 Other Versions: May be Notification: Vulnerability found: 30 August 2007 Contact Cisco: 31 August 2007 Tracked issue: 11 September 2007 Vulnerabili...

Cisco Phone 7940 - Remote Denial of Service

Cisco Phone 7940 - Remote Denial of Service !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student Radu State Ph.D Olivier Festor Ph.D Madynes Team, LORIA - INRIA Lorraine http://madynes.loria.fr use IO::Socket::INET; use String::Random; die "Usage $0 "...