4502 matches found
CVE-2013-5663
The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP...
MGASA-2013-0266 Updated asterisk package fixes security vulnerabilities
A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present CVE-2013-5641. A remotely exploitable crash vulnerability exists in the S...
Updated asterisk package fixes security vulnerabilities
A remotely exploitable crash vulnerability exists in the SIP channel driver if an ACK with SDP is received after the channel has been terminated. The handling code incorrectly assumes that the channel will always be present CVE-2013-5641. A remotely exploitable crash vulnerability exists in the S...
FreeBSD : asterisk -- multiple vulnerabilities (fd2bf3b5-1001-11e3-ba94-0025905a4771)
The Asterisk project reports : Remote Crash From Late Arriving SIP ACK With SDP Remote Crash when Invalid SDP is sent in SIP Request %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrig...
asterisk -- multiple vulnerabilities
The Asterisk project reports: Remote Crash From Late Arriving SIP ACK With SDP Remote Crash when Invalid SDP is sent in SIP Request...
CVE-2013-3461
Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...
CVE-2013-3461
Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...
Cisco Patches DoS, Buffer Overflow Vulnerabilities in UCM
Cisco has again pushed out an update for its Unified Communications Manager product, fixing several vulnerabilities that if left unpatched could lead to a denial of service attack, allow attackers to modify data or execute arbitrary commands, among other problems. The problems exist in versions...
Fedora Update for twinkle FEDORA-2013-13018
Check for the Version of twinkle OpenVAS Vulnerability Test Fedora Update for twinkle FEDORA-2013-13018 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for twinkle FEDORA-2013-13019
Check for the Version of twinkle OpenVAS Vulnerability Test Fedora Update for twinkle FEDORA-2013-13019 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 17 Update: twinkle-1.4.2-19.fc17.1
Twinkle is a SIP based soft phone for making telephone calls over IP networ ks...
[SECURITY] Fedora 18 Update: twinkle-1.4.2-19.fc18.1
Twinkle is a SIP based soft phone for making telephone calls over IP networ ks...
Cisco TelePresence CVE-2013-3378 Software Malformed SIP Packet Handling Remote DoS
According to the self-reported version returned by the SNMP service on the remote device, it is affected by a denial of service vulnerability that can be triggered by sending a specially crafted SIP packet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69049;...
Cisco TelePresence CVE-2013-3377 Malformed SIP Packet Handling Remote DoS
According the self-reported version returned by the SNMP service on the remote device, it is affected by a denial of service vulnerability that can be triggered by sending a specially crafted SIP packet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69048;...
Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability (cisco-sa-20120926-cucm)
Cisco Unified Communications Manager contains a vulnerability in its Session Initiation Protocol SIP implementation that could allow an unauthenticated, remote attacker to cause a critical service to fail, which could interrupt voice services. Affected devices must be configured to process SIP...
CVE-2013-3401
The SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger unintended use of NOTIFY messages via unspecified vectors, aka Bug ID CSCud96080...
Code injection
The SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger unintended use of NOTIFY messages via unspecified vectors, aka Bug ID CSCud96080...
CVE-2013-3401
The CVE-2013-3401 issue affects the SIP implementation in Cisco TelePresence TC Software. It arises from errors in the SIP stack that allow an unauthenticated, remote attacker to cause unintended NOTIFY messages, potentially impacting the integrity of communications. Cisco’s advisory notes that e...
Cisco TC Software SIP Implementation Vulnerability
A vulnerability in the Session Initiation Protocol SIP implementation used in TC Software could allow an unauthenticated, remoteattacker to cause an endpoint to process unintended SIP NOTIFY messages. The vulnerability is due to errors in the SIP implementation. An attacker could exploit this...
