4501 matches found
CVE-2009-0636
The CVE-2009-0636 entry concerns Cisco IOS 12.0–12.4 where SIP voice services are active; processing of a valid SIP message can trigger a remote DoS causing a device crash. Affected component: Cisco IOS SIP handling; root cause is unspecified in the initial docs but is tied to SIP message handlin...
Cracking SIP passwords with SIP Digest Leak
VoIP phones have taken off in both the enterprise and the consumer markets, thanks to their ease of deployment and low operating costs. But, as this video from Enablesecurity shows, there are a number of security risks that have yet to be addressed...
CVE-2009-0631
Cisco IOS 12.0–12.4 is affected when configured with (1) SLAs Responder, (2) SIP, (3) H.323 Annex E Call Signaling Transport, or (4) MGCP. A crafted UDP packet can cause the input queue on the inbound interface to become blocked, resulting in a denial of service. The connected sources confirm the...
Openfire Multiple Vulnerabilities (Mar09)
This host is running Openfire and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodopenfiremultvulnmar09.nasl 5122 2017-01-27 12:16:00Z teissa $ Openfire Multiple Vulnerabilities Mar09 Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...
Openfire < 3.6.1 Multiple Vulnerabilities
Openfire is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:igniterealtime:openfire";...
Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
CVE-2008-6509
SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp...
Sql injection
SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp...
CVE-2008-6509
CVE-2008-6509 concerns Openfire (Jive Software) Openfire server. It is an SQL injection in the SIP plugin’s sipark-log-summary.jsp where the unsanitized input for the type parameter is used to build SQL statements. A remote attacker could execute arbitrary SQL via the type parameter, potentially ...
CVE-2008-6509
SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp...
Ubuntu Update for opal vulnerability USN-562-1
Ubuntu Update for Linux kernel vulnerabilities USN-562-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5621.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for opal vulnerability USN-562-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu: Security Advisory (USN-562-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Asterisk Pedantic模式SIP信道驱动INVITE头拒绝服务漏洞
BUGTRAQ ID: 34070 CVECAN ID: CVE-2009-0871 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 如果配置pedantic=yes的话，SIP信道驱动会对SIP回溯所接收到的INVITE执行额外的请求URI检查，检查中会对所发送的出站SIP INVITE头与接收到的SIP INVITE头做比较，检查代码假设所有情况下的每个头都不会为空，而实际上如果没有头的话，传送的值会为空，这可能在 sipuriparamscmp和sipuriheaderscmp函数中触发空指针引用。远程攻击者可以通过发送畸形的...
CVE-2009-0871
The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...
Null pointer dereference
The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...
CVE-2009-0871
The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...
CVE-2009-0871
The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...
CVE-2009-0871
The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service crash via a SIP INVITE request without...
CVE-2009-0871
CVE-2009-0871 affects the SIP channel driver in Asterisk Open Source and Asterisk Business Edition C.2.3 when the pedantic option is enabled. Remote authenticated users can crash the system by sending a SIP INVITE without headers, triggering a NULL pointer dereference in sip_uri_headers_cmp and s...
AST-2009-002: Remote Crash Vulnerability in SIP channel driver
Asterisk Project Security Advisory - AST-2009-002 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...