851 matches found
Denial of service
The Avaya 4602 SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows remote attackers to cause a denial of service audio quality loss via a flood of packets to the RTP port...
CVE-2007-3322
The CVE concerns the Avaya 4602 SIP IP Phone (Model 4602D02A) running firmware version 2.2.2 and earlier. The vulnerability arises from using a constant media port for calls, which enables remote attackers to cause a denial of service (audio quality loss) by flooding the RTP port. The connected d...
CVE-2007-3322
The Avaya 4602 SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows remote attackers to cause a denial of service audio quality loss via a flood of packets to the RTP port...
Tencent QQ SuperVideo Remote Denial of Service Vulnerability
QQ is a very popular IM in China developed by Tencent.There exists a remote denial of service vulnerability in QQ when using the SuperVideo chat.Current study showed that the attacker who successfully exploited the vulnerability would cause the remote client crash. There is an attack packet as...
Security Best Practice: MGCP Protocol Enforcement
MGCP is an implementation of the Media Gateway Control Protocol architecture1 for controlling Media Gateways on Internet Protocol IP networks and the public switched telephone network PSTN.MGCP is a signaling and call control protocol used within Voice over IP VoIP systems that typically...
[SA19095] Oreka RTP Handling Denial of Service Vulnerability
TITLE: Oreka RTP Handling Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19095 VERIFY ADVISORY: http://secunia.com/advisories/19095/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Oreka 0.x http://secunia.com/product/8523/ DESCRIPTION: A vulnerability has been...
Oreka RTP packets parsing DoS
No description provided...
CVE-2006-0912
Oreka before 0.5 allows remote attackers to cause a denial of service application crash via a "certain RTP sequence."...
Buffer overflow
Oreka before 0.5 allows remote attackers to cause a denial of service application crash via a "certain RTP sequence."...
CVE-2006-0912
Oreka before 0.5 allows remote attackers to cause a denial of service application crash via a "certain RTP sequence."...
[Full-disclosure] APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce
APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce By Sowhat 2005.07.13 http://secway.org/Advisory/AD20050713.txt Vendor Apple Inc. Product Affected Darwin Streaming Server 5.5 and below for Win32 CVE-ID: CAN-2005-2195 OverView: Darwin Streaming Server is server technology allowing...
FreeBSD : ethereal -- multiple vulnerabilities (efa1344b-5477-11d9-a9e7-0001020eed82)
An Ethreal Security Advisories reports : Issues have been discovered in the following protocol dissectors : - Matthew Bing discovered a bug in DICOM dissection that could make Ethereal crash. - An invalid RTP timestamp could make Ethereal hang and create a large temporary file, possibly filling...
Media Server Type (RTP) Detection
Binary data 2760.prm...
CVE-2004-1683
CVE-2004-1683 concerns a race condition in crrtrap on QNX RTP 6.1. The vulnerability allows local users to gain privileges by manipulating the PATH environment variable to invoke a malicious io-graphics program before crrtrap executes. Impact is described as local privilege escalation with partia...
CVE-2004-1391
The CVE-2004-1391 entry concerns the PPPoE daemon (PPPoEd) in QNX RTP 6.1, where an untrusted execution path allows local users to execute arbitrary programs by manipulating the PATH environment variable to reference a malicious mount program. This describes a local-privilege problem rooted in PA...
CVE-2004-1391
Untrusted execution path vulnerability in the PPPoE daemon PPPoEd in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program...
CVE-2004-1390
Multiple buffer overflows in the PPPoE daemon PPPoEd in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the 1 -F, 2 name, 3 en, 4 upscript, 5 downscript, 6 retries, 7 timeout, 8 scriptdetach, 9 noscript, 10 nodetach, 11 remotemac, or 12 localmac flags...
CVE-2004-1390
CVE-2004-1390 affects the PPPoE daemon (PPPoEd) in QNX RTP 6.1 . The issue is described as multiple buffer overflows in PPPoEd that allow a remote attacker to execute arbitrary code by supplying a long argument to any of the flags: -F, name, en, upscript, downscript, retries, timeout, scriptdetac...
CVE-2004-1391
Untrusted execution path vulnerability in the PPPoE daemon PPPoEd in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program...