CVE-2007-1833

The CVE-2007-1833 issue affects Cisco Unified CallManager (CUCM) across multiple releases: 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1. The Skinny Call Control Protocol (SCCP) implementation allows remote attackers to cause a denial of service (los...

CVE-2007-1833: Undefined Security Weakness

The Skinny Call Control Protocol SCCP implementation in Cisco Unified CallManager CUCM 3.3 before 3.35SR2a, 4.1 before 4.13SR4, 4.2 before 4.23SR1, and 5.0 before 5.04aSU1 allows remote attackers to cause a denial of service loss of voice services by sending crafted packets to the 1 SCCP 2000/tcp...

Cisco Unified CallManager和Unified Server多个拒绝服务漏洞

Cisco Unified CallManager提供了一种可扩展、可分布和高可用的企业IP电话呼叫处理解决方案。 Cisco Unified CallManager CUCM和Cisco Unified Presence Server CUPS存在多个安全问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 具体问题如下： - SCCP/SCCPS端口扫描拒绝服务 Skinny Call Control Protocol SCCP协议是Cisco私有语音协议，用于CallManager系统和IP电话的呼叫管理。SCCP使用TCP 2000进行通信，运行在TCP...

Cisco Unified CallManager / Unified Presence Server multiple security vulnerabilities

Denial of service with Skinny / SCCP protocol TCP/2000, TCP/2443, ICMP echo requiests flood, IPSec UDP/8500 parsing...

[Full-disclosure] Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities Advisory ID: cisco-sa-20070328-voip http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml Revision 1.0 For Public Release 200...

SUSE-SA:2006:069: asterisk

The remote host is missing the patch for the advisory SUSE-SA:2006:069 asterisk. Two security problem have been found and fixed in the PBX software Asterisk. CVE-2006-5444: Integer overflow in the getinput function in the Skinny channel driver chanskinny.c as used by Cisco SCCP phones, allows...

Debian DSA-1229-1 : asterisk - integer overflow

Adam Boileau discovered an integer overflow in the Skinny channel driver in Asterisk, an Open Source Private Branch Exchange or telephone system, as used by Cisco SCCP phones, which allows remote attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

DSA-1229-1 asterisk

Bulletin has no description...

Integer overflow vulnerability in Asterisk driver for Cisco SCCP-enabled phones

Overview Asterisk contains an integer overflow vulnerability. This vulnerability may allow an attacker to run arbitrary code. Description Asterisk is an open-source PBX software package that provides voicemail, three-way calling, and other features. Skinny Client Control Protocol SCCP is a...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

CVE-2006-5444

CVE-2006-5444 involves an integer overflow in Asterisk’s Skinny channel driver (chan_skinny.c). Affected are Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, used by Cisco SCCP phones. An attacker can trigger a heap-based buffer overflow via a crafted dlen value, potentially leading to remot...

CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

Security-Assessment.com Advisory: Asterisk remote heap overflow

======================================================================== = Asterisk - chanskinny Remote Unauthenticated Heap Overflow = = Vendor Website: = http://www.asterisk.org = = Affected Version: = All 1.2-branch releases prior to and including 1.2.12.1 = All 1.0-branch releases prior to an...

Skinny Server Detection

The remote server is an H.323 proxy that understands the Skinny protocol, also known as SCCP, for 'Skinny Client Control Protocol'. Skinny is Cisco's proprietary lightweight terminal control protocol used by some VoIP phones to communicate with Cisco CallManager or Asterisk PBX systems. C Tenable...

asterisk -- remote heap overwrite vulnerability

Adam Boileau of Security-Assessment.com reports: The Asterisk Skinny channel driver for Cisco SCCP phones chanskinny.so incorrectly validates a length value in the packet header. An integer wrap-around leads to heap overwrite, and arbitrary remote code execution as root...

CVE-2005-0186

Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service ITS, CallManager Express CME or Survivable Remote Site Telephony SRST, allows remote attackers to cause a denial of service device reboot via a malformed packet to the SCCP port...

CVE-2005-0186

CVE-2005-0186 affects Cisco IOS releases 12.1YD, 12.2T, 12.3 and 12.3T when ITS/CME/SRST are active. A malformed SCCP control message can trigger a device reboot (DoS). Answer: vulnerable component is IOS Telephony Service/CME/SRST handling of SCCP; root cause is malformed control protocol messag...

CVE-2005-0186: Undefined Security Weakness

Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service ITS, CallManager Express CME or Survivable Remote Site Telephony SRST, allows remote attackers to cause a denial of service device reboot via a malformed packet to the SCCP port...