CVE-2007-3319: Undefined Security Weakness

The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications...

CVE-2007-3321: Undefined Security Weakness

The Avaya 4602 SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denial of service device reboot via a flood of packets to the BOOTP port 68/udp...

CVE-2007-3320: Undefined Security Weakness

The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact...

SerWeb 0.9.4 - load_lang.php Remote File Inclusion

SerWeb 0.9.4 - loadlang.php Remote File Inclusion !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion

!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

Nortel Networks SIP多媒体PC客户端远程溢出及拒绝服务漏洞

北电的SIP多媒体PC客户端可为用户提供强大的通讯功能，包括IP电话、即时通讯等。 SIP多媒体PC客户端中的电话组件的SIP头解析模块中存在缓冲区溢出漏洞，如果远程攻击者发送了畸形的SIP消息的话，就可能触发这个溢出，导致执行任意指令；此外，发送类似的畸形消息还可能导致电话组件拒绝服务。 Nortel Networks 多媒体PC客户端SIP电话 release 4.1, v3.5.208 Nortel Networks --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Snom-320 SIP电话远程非授权访问信息泄露漏洞

Snom-320是一款功能强大的SIP业务电话。 Snom-320在处理数据交互时存在漏洞，远程攻击者可能利用此漏洞获取敏感信息。 Snom-320内嵌了Web服务器支持终端用户配置，该服务器默认监听在标准的HTTP 80端口。除了这个端口外，Snom-320电话还打开了TCP 1800端口。如果通过浏览器访问了1800端口的话，就会无须任何口令便显示以下信息： Missed Calls Date Time Missed Local Identity Number --/--/---- 5:09PM 1 [email protected] Snom A Received Calls Da...

SJPhone SIP Client INVITE Transaction Remote DoS

Binary data 4105.prm...

AOL Instant Messenger <= 6.1.32.1 SIP INVITE Message DoS

Binary data 4103.prm...

Authentication flaw

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator are affected prior to version 4.5.2. The vulnerability allows remote attackers to bypass SIP authentication via a specific maddr parameter, effectively defeating authentication for SIP sessions. The advisory wording indicates the issue exists in versions before 4.5.2...

InGate Firewall和SIParator存在多个未明漏洞

InGate Firewall/SIParator是具备SIP功能的企业级防火墙。 InGate Firewall/SIParator存在多个未明问题，远程攻击者可以利用漏洞绕过SIP验证需要访问敏感信息。 目前没有详细漏洞细节提供。 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2...

Code injection

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...

CVE-2007-1693

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...

CVE-2007-1693

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...

CVE-2007-1693

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...

CVE-2007-1693

The CVE-2007-1693 issue affects Yet Another Telephony Engine (Yate) before version 1.2.0. The SIP channel module reads the Call-Info header and uses the header’s purpose parameter to set caller_info_uri; a programming error causes a NULL dereference when the purpose param is missing, allowing rem...

CVE-2007-1693: Improper Input Validation

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...