5253 matches found
CVE-2007-5792: Undefined Security Weakness
The Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session...
CVE-2007-5768
The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...
CVE-2007-5768
The CVE-2007-5768 entry affects the Globe7 soft phone client version 7.3, which transmits username and password in cleartext over HTTP. This exposes credentials to network eavesdropping, enabling potential disclosure of sensitive information. The vulnerability is a information disclosure issue ca...
CVE-2007-5768
The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...
CVE-2002-2385
Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a URL containing a long voice phone number...
CVE-2002-2384: Undefined Security Weakness
hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service...
CVE-2007-5768: Undefined Security Weakness
The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic...
Design/Logic Flaw
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode."...
Code injection
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service device hang via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server...
CVE-2007-5638
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to...
CVE-2007-5639
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service device hang via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server...
CVE-2007-5639
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service device hang via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server...
CVE-2007-5637
The CVE-2007-5637 entry applies to Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and related Nortel products (IP Phone, BCM, and other lines). The vulnerability is described as remote eavesdropping on the physical environment via an Open Audio Stream message that enables a surveillance mode. ...
CVE-2007-5639
The CVE-2007-5639 entry concerns Nortel UNIStim family devices (Nortel UNIStim IP Softphone 2050, IP Phone 1140E, plus other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets). The vulnerability allows remote attackers to cause a denial of service (device hang) by sending a flood of Mute/Un...
CVE-2007-5637: Exposure of Sensitive Information to an Unauthorized Actor
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode."...
phone-sqlxss.txt
In a previous post http://seclists.org/fulldisclosure/2007/Oct/0174.html , we have seen how XSS injection can be performed over SIP to inject malicious JavaScript into the browser of an user that check the call history of his phone. In this post, we will detail how XSS injection can be performed...
CVE-2007-5638: Exposure of Sensitive Information to an Unauthorized Actor
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to...
CVE-2007-5640: Undefined Security Weakness
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server...
CVE-2007-5639: Undefined Security Weakness
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service device hang via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server...
