[Full-disclosure] 3 messsages attack remote DOS on Cisco 7940

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 3 February, 2007 ID: KIPH5 Synopsis After sending a series of three SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in March 2007 and...

Type confusion

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4382

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4382

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4382

CVE-2007-4382 affects CounterPath X-Lite 3.0 34025 and possibly eyeBeam, where a SIP INVITE message lacking a Content-Type header can cause a device crash (remote denial of service). The available documents confirm the vulnerable component and the attack vector (SIP INVITE without Content-Type) a...

CVE-2007-4382: Undefined Security Weakness

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4366

WengoPhone 2.1 allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4366

WengoPhone 2.1 allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

Type confusion

WengoPhone 2.1 allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4366

WengoPhone 2.1 allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4366

CVE-2007-4366 affects WengoPhone 2.1. It allows remote attackers to cause a denial of service (device crash) by sending a SIP INVITE message lacking a Content-Type header. The available documents confirm the affected product/version and the root cause (malformed SIP INVITE), with the impact descr...

CVE-2007-4366: Undefined Security Weakness

WengoPhone 2.1 allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

WengoPhone SIP Soft Phone畸形报文拒绝服务漏洞

WengoPhone SIP Soft Phone是一款基于SIP的VoIP电话程序。 WengoPhone SIP Soft Phone实现存在消息验证检查问题，远程攻击者可以利用漏洞进行拒绝服务攻击，使应用程序崩溃。 问题是存在于SIP客户端组件不正确处理SIP报文，MESSAGE处理没有"Content-Type"字段的畸形报文可导致应用程序崩溃。 Wengo WengoPhone 2.1 目前没有解决方案提供： http://www.wengophone.com/ /main.cpp/ include stdio.h include string using namespace...

CounterPath X-Lite / WengoPhone SIP softphone DoS

Crash on missed Content-Type field in INVITE or MESSAGE request...

CounterPath X-Lite SIP phone Remote Denial of Service vulnerability

Title ===== CounterPath X-Lite SIP phone Remote Denial of Service vulnerability Date ==== 10 August 2007 Affected Software ================= X-Lite versions 3.x tested on 3.0 34025 Maybe eyeBeam also ; Overview ======== X-Lite by CounterPath Solutions, Inc. is a free and wild used SIP based...

wengophone-dos.txt

Title ===== WengoPhone SIP phone Remote Denial of Service vulnerability Date ==== 10 August 2007 Affected Software ================= WengoPhone versions 2.x tested on 2.1 Overview ======== WengoPhone is a thriving VoIP Service Provider from France. It is a free and wild used SIP based softphone...

WengoPhone 2.x SIP Phone Remote Denial of Service Exploit

No description provided by source. /main.cpp/ include stdio.h include string using namespace std; ifdef WIN32 include winsock2.h pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0...

CounterPath X-Lite 3.x SIP phone Remote Denial of Service Exploit

No description provided by source. /main.cpp/ include stdio.h include string using namespace std; ifdef WIN32 include winsock2.h pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0...

counterpath-dos.txt

Title ===== CounterPath X-Lite SIP phone Remote Denial of Service vulnerability Date ==== 10 August 2007 Affected Software ================= X-Lite versions 3.x tested on 3.0 34025 Maybe eyeBeam also ; Overview ======== X-Lite by CounterPath Solutions, Inc. is a free and wild used SIP based...

WengoPhone 2.x - SIP Phone Remote Denial of Service

WengoPhone 2.x - SIP Phone Remote Denial of Service /main.cpp/ include include using namespace std; ifdef WIN32 include pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0 define...