[Full-disclosure] [MU-200703-01] Remote DOS in Asterisk SIP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DOS in Asterisk SIP MU-200703-01 March 07, 2006 http://labs.musecurity.com/advisories.html Affected Products/Versions: Asterisk versions 1.2.15 and 1.4.0, and earlier versions Product Overview: http://www.asterisk.org/ "Asterisk is the most...

[SECURITY] Fedora Core 6 Update: ekiga-2.0.5-3.fc6

Ekiga is a tool to communicate with video and audio over the internet. It uses the standard SIP and H323 protocols...

[SECURITY] Fedora Core 5 Update: ekiga-2.0.1-5

GnomeMeeting is a tool to communicate with video and audio over the interne t. It uses the the standard SIP and H323 protocols...

CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

DEBIAN-CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

Null pointer dereference

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

CVE-2007-1306

CVE-2007-1306 affects Asterisk SIP: a NULL pointer dereference in the SIP handling code can be triggered by a remote attacker sending a SIP packet that lacks a URI and SIP-version header, causing a crash (DoS). Affected versions per public sources: Asterisk 1.4.x before 1.4.1 and 1.2.x before 1.2...

Asterisk null pointer dereference remote pre-authentication DoS vulnerability

Overview Asterisk contains a null pointer dereference vulnerability that may allow a remote, unauthenticated attacker to cause a denial-of-service condition on a vulnerable system. Description Asterisk is a popular PBX application with VoIP support. Asterisk contains a null pointer dereference...

Asterisk 1.2.151.4.0 - Remote Denial of Service

Asterisk 1.2.151.4.0 - Remote Denial of Service / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750...

Asterisk 1.2.15/1.4.0 - Remote Denial of Service

/ this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750, req=0x4088e760, uri=0x0 at chansip.c:8257 8257...

[Full-disclosure] asterisk remote pre-auth denial of service

A very serious remote denial of service was recently patched in asterisk some limited information on the problem can be found here http://asterisk.org/taxonomy/term/32 the bug exists in the asterisk SIP channel driver, anyone using asterisk running SIP is advised to patch their systems as soon as...

Asterisk <= 1.2.15 / 1.4.0 pre-auth Remote Denial of Service Exploit

No description provided by source. / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750,...

Cisco IOS SIP Packet Handling Remote DoS (CSCsh58082)

The remote version of IOS contains a flaw that could cause the remote router to crash when it receives a malicious SIP Session Initiation Protocol packet. An attacker might use these flaws to disable this device remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

[SECURITY] Fedora Core 6 Update: ekiga-2.0.5-2.fc6

Ekiga is a tool to communicate with video and audio over the internet. It uses the standard SIP and H323 protocols...

[SECURITY] Fedora Core 5 Update: ekiga-2.0.1-4

GnomeMeeting is a tool to communicate with video and audio over the interne t. It uses the the standard SIP and H323 protocols...

SUSE-SA:2006:069: asterisk

The remote host is missing the patch for the advisory SUSE-SA:2006:069 asterisk. Two security problem have been found and fixed in the PBX software Asterisk. CVE-2006-5444: Integer overflow in the getinput function in the Skinny channel driver chanskinny.c as used by Cisco SCCP phones, allows...