Code injection

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...

CVE-2007-0961

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...

Cisco Firewall Services Module vulnerable to DoS via inspection of malformed SIP messages

Overview Cisco Firewall Services Module fails to properly inspect SIP messages. This vulnerability may allow a remote attacker to cause a denial of service condition. Description The Cisco Firewall Services Module is an integrated firewall service for Cisco Catalyst 6500 series switches and Cisco...

CVE-2007-0961

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...

CVE-2007-0961

Cisco PIX 500, ASA 5500 Series, and FWSM (3.x) are affected when SIP inspection is enabled. A vulnerability in SIP message handling allows remote, unauthenticated attackers to trigger a DoS by sending malformed SIP packets, potentially causing device reloads/reboots. Affected versions include ASA...

Cisco PIX / ASA / FWSM multiple security vulnerabilities

Multiple DoS conditions on HTTP, SIP, TCP traffic parsing...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances Advisory ID: cisco-sa-20070214-pix http://www.cisco.com/warp/public/707/cisco-sa-20070214-pix.shtml Revision 1.0 For Public Release 2007 February 14 1600 UTC GMT -...

Cisco Firewall Services Module, PIX and ASA SIP Message Denial of Service Vulnerability

Cisco Firewall Services Module, PIX Security Appliance, and ASA Security Appliance contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability exists due to an error when handling SIP messages. An unauthenticated, remo...

Cisco IOS SIP报文处理远程拒绝服务漏洞

Cisco IOS是Cisco网络设备所使用的操作系统。 运行IOS且支持语音通讯的Cisco设备默认下启用了SIP，但可能没有正确配置。如果向这样的设备发送特制的SIP报文的话，就可能导致设备重启。 Cisco IOS 12.4 Cisco IOS 12.3 临时解决方法： 关闭SIP处理 Enter configuration commands, one per line. End with CNTL/Z. Routerconfigsip-ua Routerconfig-sip-uano transport udp Routerconfig-sip-uano transport tc...

Cisco IP telephony routers DoS

SIP packet UDP/5060 to device with vois over IP support, but not configured for SIP causes device to crash...

Cisco Security Advisory: SIP Packet Reloads IOS Devices Not Configured for SIP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: SIP Packet Reloads IOS Devices Not Configured for SIP Advisory ID: cisco-sa-20070131-sip http://www.cisco.com/warp/public/707/cisco-sa-20070131-sip.shtml Revision 1.0 For Public Release 2007 Jan 31 0900 UTC GMT -...

SIP Packets Reload IOS Devices with support for SIP

Cisco devices running an affected version of Internetwork Operating System IOS which supports Session Initiation Protocol SIP are affected by a vulnerability that may lead to a reload of the device when receiving a specific series of packets destined to port 5060. This issue is compounded by a...

ProCheckUp Security Advisory 2006.14

PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability This advisory has been published following consultation with UK NISCC http://www.niscc.gov.uk/ Date Found: 3rd November 2006 Date Public: 22nd January 2007 Vulnerable: Phones confirme...

Code injection

AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...

CVE-2007-0431

AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...

CVE-2007-0431

CVE-2007-0431 affects AVM FRITZ!Box devices (e.g., Fritz!Box 7050) with a VoIP/SIP service. The vulnerability is triggered by sending a zero-length UDP packet to the SIP port (5060), which can cause a denial-of-service (VoIP application crash). Connected sources (NVD/OpenVAS) confirm the affected...

Vote! Pro 4.0 - Multiple PHP Code Execution Vulnerabilities

Vote! Pro 4.0 - Multiple PHP Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/22191/info Multiple VoIP phones using the Aredfox PA168 Chipset are prone to a session-hijacking vulnerability due to a design error. An attacker can exploit this issue to gain administrative...

DoS against AVM Fritz!Box 7050 (and others)

Denial of Service against AVM Fritz!Box 7050 and others Discovered by: Matthias Wenzel Advisory: http://mazzoo.de/blog/2007/01/18FritzBoxDoS Manufacturer: AVM www.avm.de Product: Fritz!Box 750 and others Vendor was notified 6 month ago see blog entry by Matthias Sending a zero-length UDP packet t...

AVM Fritz!Box VoIP router DoS

Crash on empty UDP packet to UDP/5060 SIP port...

Authentication flaw

Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...