114 matches found
Code injection
Unspecified vulnerability in the SIP server in SIP Enablement Services SES in Avaya Communication Manager 3.1.x and 4.x allows remote authenticated users to cause a denial of service resource consumption via unknown vectors...
CVE-2008-6573
Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services SES in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager SPIM in the web...
Sql injection
Multiple SQL injection vulnerabilities in Avaya SIP Enablement Services SES in Avaya Avaya Communication Manager 3.x, 4.0, and 5.0 1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors related to profiles in the SIP Personal Information Manager SPIM in the web...
CVE-2008-6575
Technical details about CVE-2008-6575 are not publicly provided in the connected documents. The materials only reiterate an unspecified denial-of-service against Avaya SES SIP server. Monitor for updates and new advisories to clarify impact and remediation.
CVE-2008-6575
Unspecified vulnerability in the SIP server in SIP Enablement Services SES in Avaya Communication Manager 3.1.x and 4.x allows remote authenticated users to cause a denial of service resource consumption via unknown vectors...
Asterisk PBX SDP Header Overflow Vulnerability
The remote Asterisk PBX SIP server is affected by an overflow vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ========================================================== SerWeb 0.9.4 loadlang.php Remote File Inclusion Exploit ========================================================== !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software,...
serweb094-rfi.txt
!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
SerWeb 0.9.4 - load_lang.php Remote File Inclusion
SerWeb 0.9.4 - loadlang.php Remote File Inclusion !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion
!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
OpenSER OSP模块Validateospheader函数缓冲区溢出漏洞
OpenSER是一款开放源码的SIP服务器。 OpenSER的开放结算协议（OSP）模块中Validateospheader函数在处理特制报文时存在缓冲区溢出，远程攻击者可能利用此漏洞在服务器上执行任意指令。 漏洞相关的代码如下： int validateospheader struct sipmsg msg, char ignore1, char ignore2 如果攻击者向服务器发送了恶意报文的话就可能触发这个漏洞，导致远程执行任意指令。 OpenSER OpenSER = 1.1.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
