CVE-2008-1748: Improper Input Validation

Cisco Unified Communications Manager 4.1 before 4.13SR7, 4.2 before 4.23SR4, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 does not properly validate SIP URLs, which allows remote attackers to cause a denial of service service interruption via a SIP INVITE message, aka Bug ID CSCsl22355...

Code injection

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

CVE-2007-5583: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

CVE-2007-6371: Improper Input Validation

Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service device inoperability via a SIP INVITE message accompanied by an immediately subsequent SIP CANCEL message, followed by a second SIP INVITE message in a different session...

[Full-disclosure] Cisco Phone 7940 remote DOS

Cisco 7940 Denial of Service Vulnerability Hardware: Cisco 7940 SIP Phone Severity: High – Denial of Service Software: Affected version: P0S3-08-7-00 Other Versions: May be Notification: Vulnerability found: 30 August 2007 Contact Cisco: 31 August 2007 Tracked issue: 11 September 2007 Vulnerabili...

Buffer overflow

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

Design/Logic Flaw

The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with...

CVE-2007-5791

The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with...

CVE-2007-5791

The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with...

CVE-2007-5788: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP INVITE message...

Code injection

Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.12, and Unified CallManager 5.0, allow remote attackers to cause a denial of service kernel panic via a flood of SIP INVITE messages to UDP port 5060, which triggers resource exhaustion, aka CSCsi75822...

CVE-2007-5537

Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.12, and Unified CallManager 5.0, allow remote attackers to cause a denial of service kernel panic via a flood of SIP INVITE messages to UDP port 5060, which triggers resource exhaustion, aka CSCsi75822...

CVE-2007-5537: Undefined Security Weakness

Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.12, and Unified CallManager 5.0, allow remote attackers to cause a denial of service kernel panic via a flood of SIP INVITE messages to UDP port 5060, which triggers resource exhaustion, aka CSCsi75822...

Code injection

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via 1 an empty SIP message or 2 a SIP INVITE message with a malformed To header, different vectors than CVE-2007-4553...

Thomson SpeedTouch ST 2030 (SIP Phone) - SIP Invite Message Remote Denial of Service

source: https://www.securityfocus.com/bid/25446/info Thomson SpeedTouch 2030 is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages. Exploiting this issue allows remote attackers to cause the device to stop responding, thus denying...

Thomson SpeedTouch ST 2030 (SIP Phone) - SIP Invite Message Remote Denial of Service

Thomson SpeedTouch ST 2030 SIP Phone - SIP Invite Message Remote Denial of Service source: https://www.securityfocus.com/bid/25446/info Thomson SpeedTouch 2030 is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages. Exploiting this...

CVE-2007-4498

The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service blocked call reception via a certain SIP INVITE message followed by a...

CVE-2007-4498: Undefined Security Weakness

The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service blocked call reception via a certain SIP INVITE message followed by a...

Code injection

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.70, allows remote attackers to cause a denial of service device reboot via 1 a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or 2 a certain invalid SIP INVITE message that contains a remote...

CVE-2007-4459: Improper Input Validation

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.70, allows remote attackers to cause a denial of service device reboot via 1 a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or 2 a certain invalid SIP INVITE message that contains a remote...