Buffer overflow

Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command...

Debian: Security Advisory (DSA-1229-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1833

The Skinny Call Control Protocol SCCP implementation in Cisco Unified CallManager CUCM 3.3 before 3.35SR2a, 4.1 before 4.13SR4, 4.2 before 4.23SR1, and 5.0 before 5.04aSU1 allows remote attackers to cause a denial of service loss of voice services by sending crafted packets to the 1 SCCP 2000/tcp...

Code injection

The Skinny Call Control Protocol SCCP implementation in Cisco Unified CallManager CUCM 3.3 before 3.35SR2a, 4.1 before 4.13SR4, 4.2 before 4.23SR1, and 5.0 before 5.04aSU1 allows remote attackers to cause a denial of service loss of voice services by sending crafted packets to the 1 SCCP 2000/tcp...

CVE-2007-1833

The Skinny Call Control Protocol SCCP implementation in Cisco Unified CallManager CUCM 3.3 before 3.35SR2a, 4.1 before 4.13SR4, 4.2 before 4.23SR1, and 5.0 before 5.04aSU1 allows remote attackers to cause a denial of service loss of voice services by sending crafted packets to the 1 SCCP 2000/tcp...

CVE-2007-1833

The CVE-2007-1833 issue affects Cisco Unified CallManager (CUCM) across multiple releases: 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1. The Skinny Call Control Protocol (SCCP) implementation allows remote attackers to cause a denial of service (los...

Cisco Unified CallManager和Unified Server多个拒绝服务漏洞

Cisco Unified CallManager提供了一种可扩展、可分布和高可用的企业IP电话呼叫处理解决方案。 Cisco Unified CallManager CUCM和Cisco Unified Presence Server CUPS存在多个安全问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 具体问题如下： - SCCP/SCCPS端口扫描拒绝服务 Skinny Call Control Protocol SCCP协议是Cisco私有语音协议，用于CallManager系统和IP电话的呼叫管理。SCCP使用TCP 2000进行通信，运行在TCP...

[Full-disclosure] Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities Advisory ID: cisco-sa-20070328-voip http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml Revision 1.0 For Public Release 200...

Cisco Unified CallManager / Unified Presence Server multiple security vulnerabilities

Denial of service with Skinny / SCCP protocol TCP/2000, TCP/2443, ICMP echo requiests flood, IPSec UDP/8500 parsing...

SUSE-SA:2006:069: asterisk

The remote host is missing the patch for the advisory SUSE-SA:2006:069 asterisk. Two security problem have been found and fixed in the PBX software Asterisk. CVE-2006-5444: Integer overflow in the getinput function in the Skinny channel driver chanskinny.c as used by Cisco SCCP phones, allows...

Debian DSA-1229-1 : asterisk - integer overflow

Adam Boileau discovered an integer overflow in the Skinny channel driver in Asterisk, an Open Source Private Branch Exchange or telephone system, as used by Cisco SCCP phones, which allows remote attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

DSA-1229-1 asterisk

Bulletin has no description...

Integer overflow vulnerability in Asterisk driver for Cisco SCCP-enabled phones

Overview Asterisk contains an integer overflow vulnerability. This vulnerability may allow an attacker to run arbitrary code. Description Asterisk is an open-source PBX software package that provides voicemail, three-way calling, and other features. Skinny Client Control Protocol SCCP is a...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

CVE-2006-5444

CVE-2006-5444 involves an integer overflow in Asterisk’s Skinny channel driver (chan_skinny.c). Affected are Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, used by Cisco SCCP phones. An attacker can trigger a heap-based buffer overflow via a crafted dlen value, potentially leading to remot...

Security-Assessment.com Advisory: Asterisk remote heap overflow

======================================================================== = Asterisk - chanskinny Remote Unauthenticated Heap Overflow = = Vendor Website: = http://www.asterisk.org = = Affected Version: = All 1.2-branch releases prior to and including 1.2.12.1 = All 1.0-branch releases prior to an...

Skinny Server Detection

The remote server is an H.323 proxy that understands the Skinny protocol, also known as SCCP, for 'Skinny Client Control Protocol'. Skinny is Cisco's proprietary lightweight terminal control protocol used by some VoIP phones to communicate with Cisco CallManager or Asterisk PBX systems. C Tenable...