Asterisk 1.8.4.1 - SIP 'REGISTER' Request User Enumeration

source: https://www.securityfocus.com/bid/48008/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisk 1.8.4.1; other versions may also be affected. REGISTER...

sip-brute NSE Script

Performs brute force password auditing against Session Initiation Protocol SIP accounts. This protocol is most commonly associated with VoIP sessions. Script Arguments sip.timeout See the documentation for the sip library. creds.service, creds.global See the documentation for the creds library...

sip-enum-users NSE Script

Enumerates a SIP server's valid extensions users. The script works by sending REGISTER SIP requests to the server with the specified extension and checking for the response status code in order to know if an extension is valid. If a response status code is 401 or 407, it means that the extension ...

openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0385-1)

This update fixes the following security issue : A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by...

SIPDroid Agent User Enumeration

=====Tempest Security Intelligence - Advisory 01/2011 ======================================================================================================================== User enumeration in SIPDroid Agent ---------------------------------- Author: Anibal Vaz Marques de Aguiar =====Table of...

sipdroid 2.2 - SIP INVITE Response User Enumeration

source: https://www.securityfocus.com/bid/47710/info sipdroid is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. sipdroid 1.6.1, 2.0.1, and 2.2 running on Android 2.1 are vulnerable; other versions may als...

CVE-2011-1606

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...

CVE-2011-1605

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu2, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCth39586...

CVE-2011-1604

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

CVE-2011-1606

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu2, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCth39586...

Memory corruption

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...

CVE-2011-1605

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu2, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCth39586...

CVE-2011-1605

CVE-2011-1605 affects Cisco Unified Communications Manager (CUCM) 6.x, 7.x, and 8.x. The vulnerability arises from processing malformed SIP messages in the SIP services, leading to a denial of service (process failure). Cisco’s advisory lists fixes in CUCM versions 6.1(5)SU2/3, 7.1(5b)SU2, 8.0(3)...

CVE-2011-1604

The CVE-2011-1604 issue affects Cisco Unified Communications Manager (CUCM) 6.x, 7.x, 8.0, and 8.5, where a memory leak triggered by malformed SIP messages can cause DoS (memory consumption and process failure). Cisco’s advisory fixes this in CUCM versions 6.1(5)SU3, 7.1(5b)SU3, 8.0(3a)SU2, and 8...

CVE-2011-1604

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

CVE-2011-1606

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...

CVE-2011-1606

Cisco Unified Communications Manager (CUCM) 6.x–8.x is affected by CVE-2011-1606, a DoS in SIP processing triggered by malformed SIP messages. According to Cisco’s advisory, the vulnerability is fixed in CUCM releases 6.1(5)su3, 7.1(5b)su4, 8.0(3a)su2, and 8.5(1)su1. The issue can cause a process...

Asterisk 1.8.x - SIP INVITE Request User Enumeration

Asterisk 1.8.x - SIP INVITE Request User Enumeration source: https://www.securityfocus.com/bid/47676/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisks 1.8. The...