CVE-2011-1316

CVE-2011-1316 affects IBM WebSphere Application Server (WAS) SIP Proxy in the HTTP Transport, where sending a flood of UDP messages can exhaust worker threads and cause UDP messaging outage, leading to a DoS condition. Vulnerable: WAS versions before 7.0.0.15. Red Hat and OpenVAS entries corrobor...

Altigen VoIP Phone Systems buffer overflow

Heap buffer overflow on SIP/TLS TCP/5061 network packet parsing...

Asterisk main/udptl.c Buffer Overflows (AST-2011-002)

According to the version in its SIP banner, the version of Asterisk running on the remote host may be vulnerable to heap- and stack-buffer overflow attacks with specially crafted UDPTL packets. Successful exploitation requires T.38 support to be enabled on the target, which is not the default, an...

Debian DSA-2171-1 : asterisk - buffer overflow

Matthew Nicholson discovered a buffer overflow in the SIP channel driver of Asterisk, an open source PBX and telephony toolkit, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 2171-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2171-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 21, 2011 http://www.debian.org/security/faq -...

DSA-2171-1 asterisk - buffer overflow

Bulletin has no description...

Asterisk main/utils.c ast_uri_encode() CallerID Information Overflow (AST-2011-001)

Using a specially crafted caller ID string, an authenticated user placing an outgoing call through the remote Asterisk server can cause a buffer overflow leading to an application crash or execution of arbitrary code. Successful exploitation may require that the SIP channel driver is configured...

CVE-2011-0495

Stack-based buffer overflow in the asturiencode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary...

CVE-2011-0495

Stack-based buffer overflow in the asturiencode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary...

CVE-2011-0495

Stack-based buffer overflow in the asturiencode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary...

AST-2011-001: Stack buffer overflow in SIP channel driver

Asterisk Project Security Advisory - AST-2011-001 Product Asterisk Summary Stack buffer overflow in SIP channel driver Nature of Advisory Exploitable Stack Buffer Overflow Susceptibility Remote Authenticated Sessions Severity Moderate Exploits Known No Reported On January 11, 2011 Reported By...

Asterisk buffer overflow

Buffer overflow in SIP Caller ID...

asterisk -- Exploitable Stack Buffer Overflow

The Asterisk Development Team reports: The releases of Asterisk 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.2, 1.8.1.2, and 1.8.2.1 resolve an issue when forming an outgoing SIP request while in pedantic mode, which can cause a stack buffer to be made to overflow if supplied with carefully...

CVE-2010-4688

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash by making many SIP calls, aka Bug ID CSCte20030...

Information disclosure

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash by making many SIP calls, aka Bug ID CSCte20030...

CVE-2010-4688

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash by making many SIP calls, aka Bug ID CSCte20030...

CVE-2010-4688

Cisco ASA 5500 series devices (pre-8.3(2)) are affected by CVE-2010-4688 due to an issue in the SIP inspection feature that can cause a device crash when processing many SIP calls. The vulnerability affects ASA firmware versions prior to 8.3(2). The root cause is described as an unspecified vulne...

CVE-2010-4683

Memory leak in Cisco IOS before 15.01XA5 might allow remote attackers to cause a denial of service memory consumption by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733...

CVE-2010-4686

CallManager Express CME on Cisco IOS before 15.01XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service memory consumption by sending this traffic over a long duration, aka Bug ID CSCtb4795...

Design/Logic Flaw

CallManager Express CME on Cisco IOS before 15.01XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service memory consumption by sending this traffic over a long duration, aka Bug ID CSCtb4795...