CVE-2007-3351

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...

CVE-2007-3362

CVE-2007-3362 affects ageet AGEphone

CVE-2007-3363

Multiple unspecified vulnerabilities in ageet AGEphone before 1.6.3 allow remote attackers to have an unknown impact via malformed SIP packets...

CVE-2007-3350

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application hang via a flood of spoofed SIP INVITE requests...

CVE-2007-3347

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID...

CVE-2007-3368

CVE-2007-3368 describes a buffer overflow in the HTTP server of Polycom SoundPoint IP 601 SIP phones with BootROM 3.0.x+ that can be triggered by a malformed CGI parameter, enabling a remote attacker to cause a denial of service (device reboot). The vulnerability affects the HTTP CGI handling and...

CVE-2007-3362

ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to 1 cause a denial of service call disruption and device hang via a SIP message with a malformed header and 2 cause a denial of service call disruption, false ring indication, and...

CVE-2007-3347

The CVE-2007-3347 entry concerns the D-Link DPH-540/DPH-541 SIP phones. The issue is that these phones accept SIP INVITE messages that originate outside the Call Server’s IP, enabling remote attackers to initiate arbitrary SIP communication with the device. A demonstrated effect is communication ...

CVE-2007-3361

CVE-2007-3361 affects the Nortel PC Client SIP Soft Phone (version 4.1, 3.5.208[20051015]). The vulnerability allows remote attackers to cause a denial of service (device crash) by sending a SIP message with a malformed header. The provided documents do not include exploit code or a specific patc...

CVE-2007-3350: Undefined Security Weakness

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application hang via a flood of spoofed SIP INVITE requests...

CVE-2007-3368: Undefined Security Weakness

Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service device reboot via a malformed CGI parameter...

CVE-2007-3347: Undefined Security Weakness

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID...

SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

CVE-2007-3363: Undefined Security Weakness

Multiple unspecified vulnerabilities in ageet AGEphone before 1.6.3 allow remote attackers to have an unknown impact via malformed SIP packets...

CVE-2007-3348: Undefined Security Weakness

The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service device outage via a malformed SDP header in a SIP INVITE message...

CVE-2007-3349: Undefined Security Weakness

The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to 1 cause a denial of service device freeze via a malformed SIP message of a certain length or 2 cause a denial of service continuous ring via a malformed SIP message of a certain other length...

CVE-2007-3369: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service device hang or reboot via an INVITE message with a long Via header...

CVE-2007-3362: Undefined Security Weakness

ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to 1 cause a denial of service call disruption and device hang via a SIP message with a malformed header and 2 cause a denial of service call disruption, false ring indication, and...

CVE-2007-3351: Undefined Security Weakness

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...

CVE-2007-3361: Undefined Security Weakness

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...