5119 matches found
CVE-2006-0360
MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...
CVE-2006-0359
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...
CVE-2006-0359: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...
CVE-2006-0360: Undefined Security Weakness
MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...
CounterPath eyeBeam software SIP IP Phone DoS
Buffer overflow on oversized SIP packet header name...
CounterPath eyeBeam Handing SIP header Vulnerabilities
eyeBeam is a SIP softphone supporting open standards for VoIP, Video and Instant Messaging. There is a vunerability in it while handing SIP header with a large field name like this: INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK00001249z9hG4bK.00004119 From: 1249...
CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (2)
CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/16253/info A remote buffer-overflow vulnerability affects CounterPath eyeBeam because the application fails to properly validate the length of user-supplied strings prior to...
CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/16253/info A remote buffer-overflow vulnerability affects CounterPath eyeBeam because the application fails to properly validate the length of user-supplied strings prior to copying them into static process buffers. An attacker may exploit this issue t...
CVE-2006-0189
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
Buffer overflow
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
CVE-2006-0189
CVE-2006-0189 involves eStara SoftPhone. The vulnerability is a buffer overflow in SoftPhone versions 3.0.1.14 through 3.0.1.46 triggered by long SDP attributes (a=) inside SIP data carried over UDP port 5060. An unauthenticated remote attacker could potentially execute arbitrary code on the remo...
CVE-2006-0189
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
CVE-2006-0189: Undefined Security Weakness
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================================= eStara Softphone include unsigned char invite = 0x49, 0x4E, 0x56, 0x49, 0x54, 0x45, 0x20, 0x73, 0x69, 0x70, 0x3A, 0x61, 0x40, 0x31, 0x32, 0x37, 0x2E, 0x30, 0x2E, 0x30, 0x2E,...
eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Expl (2)
Exploit for unknown platform in category remote exploits ===================================================================== eStara Softphone = 3.0.1.46 SIP Remote Buffer Overflow Exploit 2 ===================================================================== !/usr/bin/perl -s damn-hippie.pl by...
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (1)
/ eStara Softphone buffer overflow exploit tested on : eStara Softphone 3.0.1.14 |||||| eStara Softphone 3.0.1.46 Vender website : http://www.estara.com/softphone/softph.exe Run this application, then use nc to send builded packet : nc -u 127.0.0.1 5060 include unsigned char invite = 0x49, 0x4E,...
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow 2 !/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote "estara softphone" exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060...
eStara Softphone SIP stack Buffer Overflow Vulnerability
eStara Softphone is a SIP softphone. There exists a buffer overflow venerability in the SIP stack when a SIP packet with SDP data, and the data length of the attribute filed "a" large than 4021 bytes. By exploiting this buffer overflow, an attacker can potentially gain control of the return addre...
eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Exploit (2)
No description provided by source. !/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote "estara softphone" exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060 Lets face it, most user...
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (1)
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow 1 / eStara Softphone buffer overflow exploit tested on : eStara Softphone 3.0.1.14 |||||| eStara Softphone 3.0.1.46 Vender website : http://www.estara.com/softphone/softph.exe Run this application, then use nc to send builded packet : nc -u...