Multiple VoIP phones vulnerabilities

Buffer overflows in integrated HTTP server. Buffer overflow on large UDP datagrams...

FiWin SS28S Wi-Fi phones backdoor account

Phone has debug console with telnet access and hardcoded account 1 with password 1...

CVE-2005-4794

The CVE-2005-4794 issue affects Cisco devices listed in the Initial document: IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM). The vulnerability is a denial of service caused by processing a compressed DNS packet containing a label length by...

CVE-2005-4794

Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager SESM allows remote attackers to cause a denial of service crash or instability via a compressed DNS packet with a label length byte with an incorrect offset...

Design/Logic Flaw

The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones does not require pairing for a connection related to the Headset Audio Gateway service, which allows user-assisted remote attackers to obtain AT level access and view phonebook...

CVE-2006-1366

Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service device shutdown, and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Transfer aka FTP service on Bluetooth channel 9...

Motorola cellular phones multiple bluetooth vulnerabilities

Security dialog spoofing, buffer overflow...

155022006-nokia_n70.txt

Software affected Bluetooth Stack on Nokia cell phones Version Nokia N70 and maybe other models Impact Remote Denial of Service, cellular phones begin to be slower and then freeze after a short period within 30 seconds. Credits Pierre Betouin - [email protected] - Bug found with BSS new...

[ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones

Software affected Bluetooth Stack on Sony/Ericsson cell phones Version Sony/Ericsson K600i, V600i, W800i, T68i and certainly other models Impact Bluetooth Stack Denial of Service may be more - may be a rootkit : - Phone DoS reboot or shutdown - White screen bug freeze sleeping Credits Pierre...

Code injection

Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone running firmware 1.1.12 051129 and CP-100E VoIP 802.11b Wireless Phone running firmware 1.1.60 allows remote attackers to gain unauthorized access via the debug service on TCP port 60023...

Cisco IP Phones DoS

Syn-flood causes phone to reload...

CiscoPhoneDos.pl.txt

!/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! use Net::RawIP; use Time::HiRes; $pkt = new Net::RawIP...

Cisco IP Phone 7940 (Reboot) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ====================================================== Cisco IP Phone 7940 Reboot Denial of Service Exploit ====================================================== !/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin...

CVE-2005-4794

Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager SESM allows remote attackers to cause a denial of service crash or instability via a compressed DNS packet with a label length byte with an incorrect offset...

Multiple Cisco 7920 wireless IP Phones vulnerabilities

Fixed SNMP read/write community is available, VxWorks debugger is available via UDP/7920 port...

CVE-2005-2182

Grandstream BudgeTone BT 100 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...

CVE-2005-2182

The affected product is Grandstream BudgeTone BT100 VoIP phones. The vulnerability arises from improper validation of Call-ID, branch, and tag values in NOTIFY messages used to verify subscriptions, enabling remote spoofing of messages such as the “Messages waiting” indicator. Root cause: inadequ...

VoIP-Phones: Weakness in proccessing SIP-Notify-Messages

Tele-Consulting GmbH security | networking | training advisory 05/07/06 URL of this advisory: http://pentest.tele-consulting.com/advisories/050706voip-phones.txt Topic: Weakness in implemenation of proccessing SIP-Notify-Messages in VoIP-Phones. Summary: Due to ignoring the value of 'Call-ID' and...

Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces

========================================================================== Title: Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces Vulnerability Discovery: FishNet Security - http://www.fishnetsecurity.com Date: 06/08/2005 Severity: Medium - Voice VLAN locally...

[SA15472] Cisco Various Products Compressed DNS Messages Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...