CVE-2007-3319

The CVE-2007-3319 entry concerns the Avaya 4602SW IP Phone (Model 4602D02A) with SIP firmware 2.2.2 and earlier, which does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication. This omission allows remote attackers to perform man-in-the-middle...

CVE-2007-3318

Buffer overflow in the Session Initiation Protocol SIP User Access Client UAC message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service call reception outage via a malformed SIP message...

CVE-2007-3320

Summary: CVE-2007-3320 affects the Avaya 4602SW IP Phone (Model 4602D02A) with SIP firmware 2.2.2 and earlier. The device accepts SIP INVITE requests from arbitrary source IP addresses, enabling remote attackers to cause an unspecified impact. The root cause is lack of source-IP filtering for INV...

CVE-2007-3322

The Avaya 4602 SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows remote attackers to cause a denial of service audio quality loss via a flood of packets to the RTP port...

CVE-2007-3319

The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications...

CVE-2007-3317

The CVE-2007-3317 entry concerns Avaya one-X Desktop Edition. The affected component is the SIP User Access Client (UAC) message parsing module, with versions 2.1.0.70 and earlier. The documented issue is that remote attackers can trigger a denial of service resulting in a device crash by sending...

CVE-2007-3318

The CVE-2007-3318 entry affects Avaya one-X Desktop Edition (version 2.1.0.70 and earlier). A buffer overflow in the SIP UAC message parsing module can be triggered by a malformed SIP message, allowing remote attackers to cause a denial of service (call reception outage). Connected sources confir...

SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================== SerWeb 0.9.4 loadlang.php Remote File Inclusion Exploit ========================================================== !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software,...

SIP Client Detection

Binary data 4106.prm...

serweb094-rfi.txt

!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

SerWeb 0.9.4 - load_lang.php Remote File Inclusion

SerWeb 0.9.4 - loadlang.php Remote File Inclusion !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion

!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

SJPhone SIP Client INVITE Transaction Remote DoS

Binary data 4105.prm...

Nortel Networks SIP多媒体PC客户端远程溢出及拒绝服务漏洞

北电的SIP多媒体PC客户端可为用户提供强大的通讯功能，包括IP电话、即时通讯等。 SIP多媒体PC客户端中的电话组件的SIP头解析模块中存在缓冲区溢出漏洞，如果远程攻击者发送了畸形的SIP消息的话，就可能触发这个溢出，导致执行任意指令；此外，发送类似的畸形消息还可能导致电话组件拒绝服务。 Nortel Networks 多媒体PC客户端SIP电话 release 4.1, v3.5.208 Nortel Networks --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Snom-320 SIP电话远程非授权访问信息泄露漏洞

Snom-320是一款功能强大的SIP业务电话。 Snom-320在处理数据交互时存在漏洞，远程攻击者可能利用此漏洞获取敏感信息。 Snom-320内嵌了Web服务器支持终端用户配置，该服务器默认监听在标准的HTTP 80端口。除了这个端口外，Snom-320电话还打开了TCP 1800端口。如果通过浏览器访问了1800端口的话，就会无须任何口令便显示以下信息： Missed Calls Date Time Missed Local Identity Number --/--/---- 5:09PM 1 [email protected] Snom A Received Calls Da...

AOL Instant Messenger <= 6.1.32.1 SIP INVITE Message DoS

Binary data 4103.prm...

Authentication flaw

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator are affected prior to version 4.5.2. The vulnerability allows remote attackers to bypass SIP authentication via a specific maddr parameter, effectively defeating authentication for SIP sessions. The advisory wording indicates the issue exists in versions before 4.5.2...