CVE-2013-7112

The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

UBUNTU-CVE-2013-7112

The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2013-7112

CVE-2013-7112 affects the Wireshark SIP dissector (epan/dissectors/packet-sip.c). The flaw: dissect_sip_common does not check for empty lines, enabling a crafted SIP packet to trigger an infinite loop and denial of service. Affected: Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4. Remedia...

CVE-2013-7112

The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2013-7112

The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

MGASA-2013-0380 Updated wireshark packages fix two security vulnerabilities

Updated wireshark packages fix security vulnerabilities: The SIP dissector could go into an infinite loop CVE-2013-7112. The NTLMSSP v2 dissector could crash CVE-2013-7114...

Updated wireshark packages fix two security vulnerabilities

Updated wireshark packages fix security vulnerabilities: The SIP dissector could go into an infinite loop CVE-2013-7112. The NTLMSSP v2 dissector could crash CVE-2013-7114...

Asterisk Multiple Vulnerabilities (AST-2013-006 / AST-2013-007)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by the following vulnerabilities : - A denial of service vulnerability exists in the 'unpacksms16' function of the 'appsms.c' source file. When a 16-bit SMS message with an unusu...

Wireshark 1.8.x < 1.8.12 Multiple DoS

The installed version of Wireshark 1.8.x is a version prior to 1.8.12. It is, therefore, affected by denial of service vulnerabilities in the following dissectors : - NTLMSSP v2 - SIP Bug 9388 C Tenable Network Security, Inc. include"compat.inc"; if description scriptid71520; scriptversion"1.7";...

[THC-Hydra 7.5] Fast Parallel Network Logon Cracker

Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...

Elastix Voip system 2.x , Php code injection / Data dump Exploit

Elastix is famous asterisk voip system interface dist. it's vulnerable to php code injection vuln , which can be used to dump all data including - SIP Extention Data - Plain text admin password - Moderators passwords - All trunks data - shell upload Usage Info just add the ip list to "list.txt"...

Mandriva Linux Security Advisory : wireshark (MDVSA-2013:279)

Multiple vulnerabilities was found and corrected in Wireshark : The ieee802154maprec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a...

MGASA-2013-0347 Updated wireshark packages fix multiple vulnerabilities

Updated wireshark packages fix security vulnerabilities: The IEEE 802.15.4 dissector could crash CVE-2013-6336. The NBAP dissector could crash CVE-2013-6337. The SIP dissector could crash CVE-2013-6338. The OpenWire dissector could go into a large loop CVE-2013-6339. The TCP dissector could crash...

Updated wireshark packages fix multiple vulnerabilities

Updated wireshark packages fix security vulnerabilities: The IEEE 802.15.4 dissector could crash CVE-2013-6336. The NBAP dissector could crash CVE-2013-6337. The SIP dissector could crash CVE-2013-6338. The OpenWire dissector could go into a large loop CVE-2013-6339. The TCP dissector could crash...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (cisco-sa-20131106-sip)

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or cause memory leaks that may result in system instabilities. To exploit this vulnerability, affected...

CVE-2013-5553

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

Design/Logic Flaw

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

CVE-2013-5553

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

CVE-2013-5553

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

IBM Lotus Sametime WebPlayer DoS

This module exploits a known flaw in the IBM Lotus Sametime WebPlayer version 8.5.2.1392 and prior to cause a denial of service condition against specific users. For this module to function the target user must be actively logged into the IBM Lotus Sametime server and have the Sametime Audio Visu...