1455 matches found
Mobile Devices Drawing More Attackers' Attention
As mobile devices such as iPhones, BlackBerrys, Android phones and others have become more sophisticated and easy to use, many users have made them their main computing and Web-browsing devices. And that evolution naturally has caught the attention of attackers who have begun tailoring more and...
Last Week in Security
This was an amazingly busy news week in the security world, with a lot of major stories competing for your attention: Microsoft sharing pre-patch vulnerability data with foreign governments, IBM handing out certified pre-owned USB keys, Google spying on Wi-Fi users. If you missed anything, never...
AT&T Flaw Let Facebook Users See Accounts
A Georgia mother and her two daughters logged onto Facebook from mobile phones last weekend and wound up in a startling place: strangers’ accounts with full access to troves of private information. Read the full article. Associated Press...
RIM Security Warns of Wireless DDoS Attacks
Hackers could one day turn ordinary smart phones into “rogue” devices to attack major wireless networks, Research In Motion’s security chief warned. Scott Totzke, RIM’s vice-president of BlackBerry security, said hackers could use smart phones to target wireless carriers using a technique similar...
Snom VoIP/SIP Phone Bypass
COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Snom VoIP/SIP Phones Snom300, Snom320, Snom360, Snom370, Snom820 Vendor: snom technology AG CVD ID: CVE-2009-1048 Subject: Authentication Bypass of Snom Phone Web Interface Risk: High Effect: Remote Author: Walter...
CVE-2009-1048
The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a 1 http or ...
Authentication flaw
The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a 1 http or ...
CVE-2009-1048
The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a 1 http or ...
Authentication Bypass of Snom Phone Web Interface
COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Snom VoIP/SIP Phones Snom300, Snom320, Snom360, Snom370, Snom820 Vendor: snom technology AG CVD ID: CVE-2009-1048 Subject: Authentication Bypass of Snom Phone Web Interface Risk: High Effect: Remote Author: Walter...
SNOM VoIP phones authentication bypass
Web interface access authentication bypass...
Can someone be too connected?
There are those that would argue U.S. House Representative Pete Hoekstra is too connected. According to a recent article in a top security trade publication, Rep. Hoekstra sent tweets during his recent trip to Iraq. Some of the tweets included: “Just landed in Baghdad. I believe it may be first...
Samsung cellular phones unauthorized access
SMS Provisioning messages are not authenticated, allowing device configuration, including PIN codes change...
Pwn2Own hacker: Safari is 'easy pickings'
Charlie Miller right, the security researcher who won last year’s Pwn2Own hacker contest, is predicting that Apple’s Safari browser will be the easiest target this year. In a note posted on the popular Daily Dave mailing list, Miller describes Safari as “easy pickin’s” and forecasts that at least...
Polycom Soundpoint VoIP Phones Default Password (deprecated)
Binary data 4888.prm...
SonyEricsson mobile phones WAP DoS
Crash on SMS or UDP/2948 WAP PUSH message handling...
Cisco SIP VoIP phones DoS
Crash on malformed RTP header parsing...
Nokia N70/N73 Bluetooth Stack Denial Of Service
Nokia N70/N73 Bluetooth Stack OBEX Implementation Denial of Service ------------------------------------------------------------------ I. Summary Nokia N70 and N73 are two popular models from Nokia's N-series lineup of smart phones. A flaw has been found in the OBEX implementation in these two...
Siemens C450IP/C475IP SIP phones DoS
Malformed SIP request causes device to reboot...
Security Best Practice: Protect Yourself from VoIP Denial of Service Vulnerabilities
VoIP opens voice communications to the same kinds of security threats that imperil data communications. Attacks on data communications can come through the IP voice infrastructure and vice versa. Denial of service attacks targeting weak VoIP elements could flood the network with voice traffic,...