CVE-2010-1561

CVE-2010-1561 affects Cisco PGW 2200 Softswitch SIP stack. The vulnerability allows remote attackers to crash the device by sending a long SIP message, triggering a DoS on affected firmware releases. Affected versions include Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S11 and 9....

CVE-2010-0603

The Cisco PGW 2200 Softswitch SIP MGCP stack is affected by CVE-2010-0603 due to a malformed session attribute that can crash the device, enabling remote DoS over the network. The issue affects Cisco PGW 2200 software prior to 9.7(3)S10; Cisco lists fixes in 9.7(3)S11, 9.8(1)S5, and later release...

CVE-2010-1562

CVE-2010-1562 affects Cisco PGW 2200 Softswitch SIP MGCP processing. The vulnerability, described in Cisco advisory cisco-sa-20100512-pgw and linked CVE CSCsj98521, allows remote attackers to cause a device crash (DoS) by sending malformed SIP/Contact headers. Affected software versions include C...

CVE-2010-1567

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.81S5 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsz13590...

CVE-2010-0604

Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via unknown SIP traffic, as demonstrated by "SIP testing," aka Bug ID CSCsk38165...

CVE-2010-0603

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via a malformed session attribute, aka Bug ID CSCsk40030...

CVE-2010-1563

The CVE-2010-1563 issue affects Cisco PGW 2200 Softswitch SIP processing. A malformed SIP header can be used by a remote attacker to crash the device (DoS). Affected software includes 9.7(3)S9 and 9.7(3)P9 before 9.7(3)S11/P11; later fixes are 9.7(3)S11 and 9.8(1)S5 with subsequent releases addre...

CVE-2010-1565

Cisco PGW 2200 Softswitch SIP/MGCP stack is affected by multiple remote DoS vulnerabilities (CVE-2010-1565 among others). Exploitation can exhaust TCP sockets and prevent new connections; affected releases include Cisco PGW 2200 Softswitch 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9. Cisc...

CVE-2010-0602

Cisco PGW 2200 Softswitch SIP/MGCP stack contains DoS vulnerabilities (CVE-2010-0602 among others) that allow remote attackers to crash the device via malformed SIP/MGCP packets. Affected software: Cisco PGW 2200 Softswitch prior to 9.7(3)S11; Cisco reports that all listed vulnerabilities are fix...

CVE-2010-1565

Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service TCP socket exhaustion via unknown vectors, aka Bug ID CSCsk13561...

CVE-2010-1563

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsk04588...

CVE-2010-0604

Cisco PGW 2200 Softswitch is affected by multiple DoS vulnerabilities in its SIP and MGCP handling (CVE-2010-0604 among others). The SIP implementation can crash the device via malformed/unknown SIP traffic, potentially affecting remote availability. Cisco lists affected releases prior to 9.7(3)S...

Cisco Security Advisory: Multiple vulnerabilities in Cisco PGW Softswitch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple vulnerabilities in Cisco PGW Softswitch Document ID: 111870 Advisory ID: cisco-sa-20100512-pgw http://www.cisco.com/warp/public/707/cisco-sa-20100512-pgw.shtml Revision 1.0 For Public Release 2010 May 12 1600 UTC GMT -...

CVE-2010-1651

IBM WebSphere Application Server WAS 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing aka full trace logging for SIP are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by readi...

Design/Logic Flaw

IBM WebSphere Application Server WAS 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing aka full trace logging for SIP are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by readi...

CVE-2010-1651

IBM WebSphere Application Server WAS 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing aka full trace logging for SIP are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by readi...

CVE-2010-1651

IBM WebSphere Application Server (WAS) is affected by CVE-2010-1651: when Basic authentication and SIP tracing are enabled, SIP trace logs contain the complete inbound/outbound SIP messages, allowing a local attacker to read sensitive information. Affected versions are WAS 6.1.x prior to 6.1.0.31...

Fedora Update for sip FEDORA-2010-6096

Check for the Version of sip OpenVAS Vulnerability Test Fedora Update for sip FEDORA-2010-6096 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for sip FEDORA-2010-6077

Check for the Version of sip OpenVAS Vulnerability Test Fedora Update for sip FEDORA-2010-6077 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for sip FEDORA-2010-6096

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...