BlackBerry, Cisco Products Vulnerable to OpenSSL Bug

Vendors are continuing to check their products for potential effects from the OpenSSL heartbleed vulnerability, and both Cisco and BlackBerry have found that a variety of their products contain a vulnerable version of the software. BlackBerry on Thursday said that several of its software products...

Avaya多个IP电话命令注入和栈缓冲区溢出漏洞

Bugtraq ID:65842 Avaya IP Phones是IP电话系统。 Avaya多个IP Phones存在命令注入和基于栈的缓冲区溢出漏洞，允许远程攻击者利用漏洞使应用程序崩溃或执行任意shell命令。 0 Avaya IP Phones 厂商补丁： Avaya ----- 用户可参考如下厂商提供的安全补丁以修复该漏洞： http://www.avaya.com/...

CVE-2014-0658

Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898...

CVE-2014-0658

CVE-2014-0658 affects Cisco 9900 Series Unified IP Phones . The issue arises in SIP header processing, where a crafted SIP header can cause the device to unregister, producing a denial-of-service condition. Public sources consistently identify the vulnerability as CSCul24898. Exploitation details...

CVE-2014-0658

Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898...

CVE-2013-6685

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382...

Command injection

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382...

CVE-2013-6685

The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its filesystem, aka Bug ID CSCui04382...

Cisco Unified IP Phones 9900 Series Image Upgrade Command Injection Vulnerability

A vulnerability in the image upgrade facility of Cisco Unified IP Phones 9900 Series could allow an authenticated, local attacker to execute commands within the context of the underlying operating system. The vulnerability is due to insufficient sanitization of input during the image upgrade...

CVE-2013-5533

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334...

CVE-2013-5532

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...

Buffer overflow

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...

Design/Logic Flaw

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334...

CVE-2013-5533

CVE-2013-5533 affects Cisco Unified IP Phones 9900 Series. The vulnerability arises in the image-upgrade functionality where an authenticated, local attacker can gain privileges by injecting shell commands into an unsanitized parameter during the upgrade process, enabling command execution with O...

CVE-2013-5533

The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334...

CVE-2013-5532

The CVE-2013-5532 case affects Cisco 9900 Series IP phones. The issue is a buffer overflow in the web-application interface caused by insufficient validation of certain input fields, allowing remote attackers to trigger a denial of service (webapp interface outage). Reported by Cisco and Red Hat ...

CVE-2013-5532

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...

CVE-2013-5526

Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service device reboot via crafted SDP packets, aka Bug ID CSCuf06698...

Design/Logic Flaw

Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service device reboot via crafted SDP packets, aka Bug ID CSCuf06698...

CVE-2013-5526

The CVE-2013-5526 issue affects Cisco Unified IP Phone 8900/9900 series (Cisco 9900 fourth‑gen phones). It stems from improper SDP negotiation in the phones’ SDP handling, allowing an unauthenticated remote attacker to trigger a device reboot (DoS) by sending crafted SDP packets. Exploitation rel...