CVE-2011-4597

The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote attackers to enumerate usernames via a series ...

Asterisk Multiple Vulnerabilities (AST-2011-013 / AST-2011-014)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by the following vulnerabilities : - An issue in the SIP protocol can lead to the enumeration of endpoints with NAT settings different from the default. Note that this is an issu...

Moshi Moshi : VoIP bot written in Python

Moshi Moshi : VoIP bot written in Python Moshi Moshi is a VoIP Bot written in Python that uses SIP as VoIP Protocol, Text-to-speech engines for Output, and DTMF Tones for Input. It is part of a talk "Sounds Like Botnet " given at DEF CON 19 and BSidesLV 2011 on VoIP Botnets by Itzik Kotler and...

sip-brute NSE Script

Performs brute force password auditing against Session Initiation Protocol SIP accounts. This protocol is most commonly associated with VoIP sessions. Script Arguments sip.timeout See the documentation for the sip library. creds.service, creds.global See the documentation for the creds library...

Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100922-sip http://www.cisco.com/warp/public/707/cisco-sa-20100922-sip.shtml Revision 1.0 For Public Release 2010 Septembe...

Security Best Practice: SIP Protocol Enforcement

The Session Initiation Protocol SIP is a signaling protocol, widely used for controlling multimedia communication sessions such as voice and video calls over Internet Protocol IP. The protocol can be used for creating, modifying and terminating two-party unicast or multiparty multicast sessions...

CVE-2008-7065

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service disconnected calls and device reboot via a crafted SIP packet to UDP port 5060...

OpenH323 Opal SIP Protocol - Remote Denial of Service

!/usr/bin/env python OpenH323 Opal SIP Protocol Remote Denial of Service Vulnerability CVE-2007-4924 opal228dos.py by Jose Miguel Esparza 2007-10-08 S21sec labs import sys,socket if lensys.argv != 3: sys.exit"Usage: " + sys.argv0 + " targethost targetport\n" target = sys.argv1 targetPort =...

Fedora Update for sipp FEDORA-2008-6210

Check for the Version of sipp OpenVAS Vulnerability Test Fedora Update for sipp FEDORA-2008-6210 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for sipp FEDORA-2008-3690

Check for the Version of sipp OpenVAS Vulnerability Test Fedora Update for sipp FEDORA-2008-3690 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for sipp FEDORA-2008-6219

Check for the Version of sipp OpenVAS Vulnerability Test Fedora Update for sipp FEDORA-2008-6219 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 9 Update: sipp-3.1-2.fc9

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

reSIProcate 1.3.2 Remote Denial of Service PoC

Exploit for multiple platform in category dos / poc ============================================== reSIProcate 1.3.2 Remote Denial of Service PoC ============================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008...

[SECURITY] Fedora 9 Update: sipp-3.1-2.fc9

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

AOL AIM SIPFoundry sipXtapi RTCP Processing Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AOL AIM. Successful exploitation requires the victim to accept a Video Messaging session with the attacker. The specific flaw exists in the SIP protocol implementation library, sipXtapi.dll. If a...

Asterisk voice server DoS

SIP protocol parsing NULL pointer dereference in pedantic mode. Uninitialized memory reference on in ooh323 channel driver...

[SECURITY] Fedora 9 Update: sipp-3.1-1.fc9

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

[SECURITY] Fedora 7 Update: sipp-3.1-1.fc7

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

Cisco Unified IP Phone SCCP及SIP协议多个远程安全漏洞

BUGTRAQ ID: 27774 CVECAN ID: CVE-2008-0530,CVE-2008-0526,CVE-2008-0527,CVE-2008-0528,CVE-2008-0529,CVE-2008-0531 Cisco Unified IP Phone是思科的统一IP电话解决方案。 DNS响应解析溢出 运行SCCP和SIP固件的Cisco Unified IP Phone 7940、7940G、7960和7960G设备在处理DNS响应时存在缓冲区溢出漏洞，特制的DNS响应可以触发缓冲区溢出，在有漏洞的电话上执行任意指令。该漏洞记录为CVE-2008-0530和Cisco...

Ingate Firewall及SIParator远程拒绝服务漏洞

BUGTRAQ ID: 27222 Ingate Firewall和SIParator都是企业级的硬件防火墙设备。 Ingate Firewall和SIParator处理SIP协议数据时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 某些情况下Ingate Firewall和SIParator在呼叫结束后没有重新使用SIP媒体端口，这可能导致耗尽所有可用端口，无法创建新的呼叫。 Ingate Firewall 4.6.1 Ingate SIParator 4.6.1 厂商补丁： Ingate ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...