CVE-2013-5532: Improper Input Validation

Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service webapp interface outage via long values in unspecified fields, aka Bug ID CSCuh10343...

CVE-2013-5526

Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service device reboot via crafted SDP packets, aka Bug ID CSCuf06698...

Design/Logic Flaw

Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service device reboot via crafted SDP packets, aka Bug ID CSCuf06698...

CVE-2013-5526

Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service device reboot via crafted SDP packets, aka Bug ID CSCuf06698...

CVE-2013-5526

The CVE-2013-5526 issue affects Cisco Unified IP Phone 8900/9900 series (Cisco 9900 fourth‑gen phones). It stems from improper SDP negotiation in the phones’ SDP handling, allowing an unauthenticated remote attacker to trigger a device reboot (DoS) by sending crafted SDP packets. Exploitation rel...

PT-2013-5607

Name of the Vulnerable Software and Affected Versions Cisco 9900 fourth-generation IP phones affected versions not specified Description The issue is related to improper SDP negotiation, which can be exploited by remote attackers to cause a denial of service, resulting in a device reboot. This ca...

CVE-2013-5526: Improper Input Validation

Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service device reboot via crafted SDP packets, aka Bug ID CSCuf06698...

Cisco Unified IP Phones Multiple Vulnerabilities (cisco-sa-20110601-phone)

According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device has the following vulnerabilities : - Cisco Unified IP Phones 7900 series are prone to privilege escalation vulnerabilities. An authenticated attacker could exploit this issue t...

UBUNTU-CVE-2013-5642

The SIP channel driver channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.3-digiumphones allows remote...

SIM Card Vulnerability Could Affect Millions of Cell Phones

As many as 750 million mobile phones could be vulnerable to an encryption flaw on certain types of SIM cards, a German cryptographer and researcher warned over the weekend. Karsten Nohl, the founder of Security Research Labs in Berlin, unveiled preliminary research on his blog behind the flaw in...

CVE-2013-3426

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810...

Cross site request forgery (csrf)

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810...

CVE-2013-3426

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810...

CVE-2013-3426

CVE-2013-3426 affects Cisco 9900 Series IP phones: the Serviceability servlet does not properly restrict path values, enabling a remote attacker to read arbitrary files by supplying a pathname in a file request (Bug CSCuh52810). The issue is described as unauthenticated remote access with potenti...

CVE-2013-3426: Undefined Security Weakness

The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810...

PT-2013-4383

Name of the Vulnerable Software and Affected Versions Cisco 9900 IP phones affected versions not specified Description The issue concerns the Serviceability servlet, which does not properly restrict paths. This allows remote attackers to read arbitrary files by specifying a pathname in a file...

ACLU Asks FTC to Investigate Carriers on Android Security

The next shoe has fallen in an effort to force wireless carriers and handset makers to provide regular security updates to Android mobile devices. The American Civil Liberties Union filed a complaint this week with the U.S. Federal Trade Commission accusing four leading carriers of deceptive...

Aastra IP phones backdoor

Hardcoded telnet account admin/Mqozn...

Researchers grab cryptographic keys from Frozen Android Phones

Using a new attack on most popular Android phones platform, a team of researchers in Germany managed to grab stored cryptographic keys if the device is frozen state for an hour. The method which able to bypasses Google's data scrambling encryption system introduced in Android 4.0 Ice Cream Sandwi...

Researchers grab cryptographic keys from Frozen Android Phones

Using a new attack on most popular Android phones platform, a team of researchers in Germany managed to grab stored cryptographic keys if the device is frozen state for an hour. The method which able to bypasses Google’s data scrambling encryption system introduced in Android 4.0 Ice Cream Sandwi...