CVE-2007-4295

Cisco IOS 12.0–12.4 is affected by CVE-2007-4295, a remote code execution vulnerability triggered by a malformed SIP packet (aka CSCsi80749). The issue is documented across multiple sources (NVD, Cisco security advisory, and Nessus plugin) as a network-facing flaw that can allow arbitrary code ex...

CVE-2007-4292

Cisco IOS 12.0–12.4 memory leaks in the SIP processing path allow remote attackers to cause a denial of service (device crash). The CVE references seven CSC memory-leak variants (e.g., CSCsf11855, CSCeb21064, CSCse40276, CSCse68355, CSCsf30058, CSCsb24007, CSCsc60249). Exploitation details are no...

CVE-2007-4294

Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...

CVE-2007-4295

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749...

CVE-2007-4292

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service device crash via a malformed SIP packet, aka 1 CSCsf11855, 2 CSCeb21064, 3 CSCse40276, 4 CSCse68355, 5 CSCsf30058, 6 CSCsb24007, and 7 CSCsc60249...

CVE-2007-4294

CVE-2007-4294 describes an unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, 6.0 and Cisco IOS 12.0–12.4 that allows remote code execution via a malformed SIP packet (CSCsi80102). The connected documents confirm affected products and versions and that exploitation...

[Full-disclosure] Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Advisory ID: cisco-sa-20070808-IOS-voice http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...

Cisco VoIP routers multiple DoS conditions

Multiple vulnerabilities in implementation of SIP, MGCP, H.323 and RTP protocols. Device may be vulnerable even i protocol is not configured...

Preemptive Protection against Digium Asterisk SIP Invalid Response Code Denial of Service Vulnerability

A denial of service vulnerability has been discovered in Digium Asterisk. Asterisk is an open source telephone system. It supports a wide range of Voice over IP VOIP protocols, including SIP. SIP Session Initiation Protocol is a protocol that can establish, modify, and terminate numerous multimed...

Asterisk SIP Channel T.38 SDP Parsing Multiple Buffer Overflows

The version of Asterisk running on the remote host contains two stack-based buffer overflows in its SIP SDP handler when attempting to read the 'T38FaxRateManagement:' and 'T38FaxUdpEC:' options in the SDP within a SIP packet. An unauthenticated, remote attacker may be able to leverage this flaw ...

AsteriDex 3.0 - callboth.php Remote Code Execution

AsteriDex 3.0 - callboth.php Remote Code Execution Begin exploit !/bin/bash echo Asteridex PoC Exploit callboth.php vulnerability echo By Carl Livitt / Hoku Security / June 2007 echo This has to be a a valid SIP address, and b must answer when dialled. The exploit will fail without these conditio...

Asterisk VoIP server buffer overflow

Multiple buffer overflows if T38 fax over SIP is enabled...

Multiple Remote unauthenticated stack overflows in Asterisk chan_sip.c

======= Summary ======= Name: Multiple Remote unauthenticated stack overflows in Asterisk chansip.c Release Date: 4 July 2007 Reference: NGS00497 Discover: Barrie Dempster [email protected] Vendor: Digium Vendor Reference: ASA-010 Systems Affected: Asterisk 1.4.3; AsteriskNOW Beta6; Asterisk...

AsteriDex 3.0 - 'callboth.php' Remote Code Execution

Begin exploit !/bin/bash echo Asteridex PoC Exploit callboth.php vulnerability echo By Carl Livitt / Hoku Security / June 2007 echo This has to be a a valid SIP address, and b must answer when dialled. The exploit will fail without these conditions being met. Currently uses the Melonite SIP echo...

CVE-2007-3440

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to place calls to arbitrary phone numbers via certain requests to the web server on port 1800...

CVE-2007-3441

Format string vulnerability in the Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to cause a denial of service blocked call reception and slow calling via format string specifiers in an SDP header value, a different vulnerability than CVE-2007-33...

CVE-2007-3442

Format string vulnerability on the Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 allows remote attackers to cause a denial of service blocked call reception and calling via format string specifiers in an SIP INVITE message that lacks a host name in the Contact header...

Code injection

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to place calls to arbitrary phone numbers via certain requests to the web server on port 1800...

Format string

Format string vulnerability on the Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 allows remote attackers to cause a denial of service blocked call reception and calling via format string specifiers in an SIP INVITE message that lacks a host name in the Contact header...

Buffer overflow

Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361...