CVE-2006-0302

CVE-2006-0302 affects ZyXel P2000W VoIP 802.11b Wireless Phone with firmware WV.00.02. The issue exposes partial information disclosure by allowing remote access to sensitive data (MAC address and software version) via UDP port 9090. The provided documents do not specify the exact root cause beyo...

ACT P202S wireless VoIP phone multiple vulnerabilities

VxWorks debugger TCP/17185 access, rlogin access...

MPM HP-180W wireless VoIP phone information leak

Undocumented TCP/9090 leaks information on phone configuration...

CounterPath eyeBeam software SIP IP Phone DoS

Buffer overflow on oversized SIP packet header name...

[Full-disclosure] Clipcomm CP-100E VoIP wireless desktop phone open debug service TCP/60023

I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== VENDOR: Clipcomm VENDOR NOTIFIED: 7 December, 2005 PRODUCT: Clipcomm CP-100E VoIP...

[SA18479] Cisco IP Phones SYN Flood Device Reload Vulnerability

TITLE: Cisco IP Phones SYN Flood Device Reload Vulnerability SECUNIA ADVISORY ID: SA18479 VERIFY ADVISORY: http://secunia.com/advisories/18479/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Cisco IP Phone 7900 Series http://secunia.com/product/2809/ SOFTWARE: Cis...

Cisco IP Phones DoS

Syn-flood causes phone to reload...

CVE-2006-0179

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

Code injection

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

CVE-2006-0179

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

CVE-2006-0179

The CVE-2006-0179 issue affects Cisco IP Phone 7940. It describes a remote denial-of-service where an attacker can cause a reboot by sending a large volume of TCP SYN packets to arbitrary ports, with a demonstration targeting port 80. Connected documents corroborate the reboot-based DoS vector vi...

CVE-2006-0179: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service reboot via a large amount of TCP SYN packets syn flood to arbitrary ports, as demonstrated to port 80...

Cisco IP Phone 7940 - Reboot (Denial of Service)

Cisco IP Phone 7940 - Reboot Denial of Service !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not...

Cisco IP Phone 7940 (Reboot) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ====================================================== Cisco IP Phone 7940 Reboot Denial of Service Exploit ====================================================== !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin...

Cisco IP Phone 7940 - Reboot (Denial of Service)

!/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! not private anymore. Vulnerable phones are running ver...

www.miibeian.gov.cn ICP website record validation vulnerability-vulnerability warning-the black bar safety net

1: login to: 2: registration registration is over the phone does not receive text messages, no verification code） 3: the return home page to 4: input user name, password, CAPTCHA and click Login 5: at this point you enter the“phone code”and“mail code”---- do not enter 6: in the address bar enter“...

CVE-2005-4190

Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by 1 the identity field, 2 Category and 3 Label search fields, 4 the Mobile Phone field, and ...

CVE-2005-3804

Cisco IP Phone VoIP 7920 1.08 listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service...

CVE-2005-3803

Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded "fixed" public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information...

CVE-2005-3803

Cisco IP Phone 7920 (VoIP) 1.0(8) is affected by hard-coded public and private SNMP community strings that cannot be changed, enabling potential remote information disclosure. The issue is documented across NVD/Nessus and Cisco advisories, with a vendor alert suggesting that fixed SNMP communitie...