CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

CVE-2007-1306

CVE-2007-1306 affects Asterisk SIP: a NULL pointer dereference in the SIP handling code can be triggered by a remote attacker sending a SIP packet that lacks a URI and SIP-version header, causing a crash (DoS). Affected versions per public sources: Asterisk 1.4.x before 1.4.1 and 1.2.x before 1.2...

CVE-2007-1306

Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...

Asterisk null pointer dereference remote pre-authentication DoS vulnerability

Overview Asterisk contains a null pointer dereference vulnerability that may allow a remote, unauthenticated attacker to cause a denial-of-service condition on a vulnerable system. Description Asterisk is a popular PBX application with VoIP support. Asterisk contains a null pointer dereference...

Asterisk 1.2.151.4.0 - Remote Denial of Service

Asterisk 1.2.151.4.0 - Remote Denial of Service / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750...

[Full-disclosure] asterisk remote pre-auth denial of service

A very serious remote denial of service was recently patched in asterisk some limited information on the problem can be found here http://asterisk.org/taxonomy/term/32 the bug exists in the asterisk SIP channel driver, anyone using asterisk running SIP is advised to patch their systems as soon as...

Asterisk <= 1.2.15 / 1.4.0 pre-auth Remote Denial of Service Exploit

No description provided by source. / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750,...

Asterisk 1.2.15/1.4.0 - Remote Denial of Service

/ this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750, req=0x4088e760, uri=0x0 at chansip.c:8257 8257...

Cisco IOS SIP Packet Handling Remote DoS (CSCsh58082)

The remote version of IOS contains a flaw that could cause the remote router to crash when it receives a malicious SIP Session Initiation Protocol packet. An attacker might use these flaws to disable this device remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

[SECURITY] Fedora Core 6 Update: ekiga-2.0.5-2.fc6

Ekiga is a tool to communicate with video and audio over the internet. It uses the standard SIP and H323 protocols...

[SECURITY] Fedora Core 5 Update: ekiga-2.0.1-4

GnomeMeeting is a tool to communicate with video and audio over the interne t. It uses the the standard SIP and H323 protocols...

SUSE-SA:2006:069: asterisk

The remote host is missing the patch for the advisory SUSE-SA:2006:069 asterisk. Two security problem have been found and fixed in the PBX software Asterisk. CVE-2006-5444: Integer overflow in the getinput function in the Skinny channel driver chanskinny.c as used by Cisco SCCP phones, allows...

Code injection

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...

CVE-2007-0961

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...

CVE-2007-0961

Cisco PIX 500, ASA 5500 Series, and FWSM (3.x) are affected when SIP inspection is enabled. A vulnerability in SIP message handling allows remote, unauthenticated attackers to trigger a DoS by sending malformed SIP packets, potentially causing device reloads/reboots. Affected versions include ASA...

CVE-2007-0961

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...

CVE-2007-0961: Undefined Security Weakness

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.35.115, 7.0 before 7.05.2, and 7.1 before 7.12.5, and the FWSM 3.x before 3.13.24, when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service device reboot via malformed SIP packets...

Cisco Firewall Services Module vulnerable to DoS via inspection of malformed SIP messages

Overview Cisco Firewall Services Module fails to properly inspect SIP messages. This vulnerability may allow a remote attacker to cause a denial of service condition. Description The Cisco Firewall Services Module is an integrated firewall service for Cisco Catalyst 6500 series switches and Cisco...

Cisco PIX / ASA / FWSM multiple security vulnerabilities

Multiple DoS conditions on HTTP, SIP, TCP traffic parsing...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances Advisory ID: cisco-sa-20070214-pix http://www.cisco.com/warp/public/707/cisco-sa-20070214-pix.shtml Revision 1.0 For Public Release 2007 February 14 1600 UTC GMT -...