4500 matches found
Lilnksys SPA941 VoIP phone DoS
Denial of Service on character with code 255 in SIP INVITE message...
Apple Macintosh OS X VideoConference SIP heap buffer overflow
Overview The Apple VideoConference framework contains a buffer overflow vulnerability. If exploited, this vulnerability may allow an attacker to execute code. Description Apple's VideoConference framework is used in iChat and other applications to stream video. iChat uses SIP to make and receive...
FreePBX 2.2 - SIP Packet Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/23575/info FreePBX is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content. Attacker-supplied HTML and script code may be executed in the conte...
FreePBX 2.2 - SIP Packet Multiple HTML Injection Vulnerabilities
FreePBX 2.2 - SIP Packet Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/23575/info FreePBX is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content...
GLSA-200704-01 : Asterisk: Two SIP Denial of Service vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200704-01 Asterisk: Two SIP Denial of Service vulnerabilities The Madynes research team at INRIA has discovered that Asterisk contains a NULL pointer dereferencing error in the SIP channel when handling INVITE messages. Furthermor...
Asterisk: Two SIP Denial of Service vulnerabilities
Background Asterisk is an open source implementation of a telephone private branch exchange PBX. Description The Madynes research team at INRIA has discovered that Asterisk contains a null pointer dereferencing error in the SIP channel when handling INVITE messages. Furthermore qwerty1979...
asterisk-Invite.txt
Due to many requests for the POC and since most Asterisk systems should have been patched by now, please find in this message the POc for our advisory posted on http://seclists.org/fulldisclosure/2007/Mar/0315.html usage example: perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060...
Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp',...
Asterisk SIP响应远程拒绝服务漏洞
Asterisk是一款PBX系统的软件，运行在Linux系统上，支持使用SIP、IAX、H323协议进行IP通话。 Asterisk在处理远程系统的SIP回复时存在拒绝服务漏洞，如果远程系统所发送的SIP回复中包含有SIP Response code 0的话，就会导致服务崩溃。 Asterisk Asterisk 1.4.x 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://ftp.digium.com/pub/asterisk/releases/asterisk-1.4.2.tar.gz...
pcapsipdump SIP packets DoS
No description provided...
Asterisk 1.2.161.4.1 - SIP INVITE Remote Denial of Service
Asterisk 1.2.161.4.1 - SIP INVITE Remote Denial of Service !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE...
Asterisk 1.2.16/1.4.1 - SIP INVITE Remote Denial of Service
!/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE sip:$ARGV2@$ARGV0:$ARGV1 SIP/2.0\r\nVia: SIP/2.0/UDP...
Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit
Exploit for multiple platform in category dos / poc ====================================================================== Asterisk " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE sip:$ARGV2@$ARGV0:$ARGV1 SIP/2.0\r\nVia: SIP/2.0/UDP...
Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...
Null pointer dereference
pcapsipdump.cpp in pcapsipdump before 0.1.3 allows remote attackers to cause a denial of service application crash via a malformed SIP packet, which results in a NULL pointer dereference...
Asterisk SIP通道驱动应答零代码远程拒绝服务漏洞
Asterisk是一个开放源代码的软件VoIP PBX系统。 Asterisk处理包含code 0的应答消息存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 从远程系统接收到部分SIP应答如SIP Response code 0，可导致Asterisk崩溃，造成拒绝服务攻击。 Asterisk Asterisk 1.4.1 Asterisk Asterisk 1.2.16 Asterisk Asterisk 1.2.15 Asterisk Asterisk 1.2.14 Asterisk Asterisk 1.2.13 Asterisk Asterisk 1.2.11...
CVE-2007-1650
The CVE-2007-1650 issue affects pcapsipdump (pcapsipdump.cpp) before version 0.1.3. A malformed SIP packet can be received remotely, triggering a NULL pointer dereference and causing the application to crash (DoS). The NVD entry reports a network attack vector with low complexity and no authentic...
CVE-2007-1594
The handleresponse function in chansip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP Response code 0 in a SIP packet...
CVE-2007-1594
The handleresponse function in chansip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP Response code 0 in a SIP packet...
Code injection
The handleresponse function in chansip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP Response code 0 in a SIP packet...