CVE-2006-4194: Undefined Security Weakness

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

CVE-2006-4032

Unspecified vulnerability in Cisco IOS CallManager Express CME allows remote attackers to gain sensitive information user names from the Session Initiation Protocol SIP user directory via certain SIP messages, aka bug CSCse92417...

CVE-2006-4032

Unspecified vulnerability in Cisco IOS CallManager Express CME allows remote attackers to gain sensitive information user names from the Session Initiation Protocol SIP user directory via certain SIP messages, aka bug CSCse92417...

CVE-2006-4029

Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...

CVE-2006-4029

AGEphone 1.24 and 1.38.1 are affected by a stack-based buffer overflow in sipd.dll that can be triggered by a crafted UDP SIP packet. This vulnerability allows remote attackers to execute arbitrary code. Affected component: sipd.dll within AGEphone. Root cause: stack-based overflow in the SIP pac...

CVE-2006-4029

Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...

CVE-2006-4032: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS CallManager Express CME allows remote attackers to gain sensitive information user names from the Session Initiation Protocol SIP user directory via certain SIP messages, aka bug CSCse92417...

CVE-2006-4029: Undefined Security Weakness

Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...

AgePhone software SIP IP phone buffer overflow

Buffer overflow on SIP packet parsing...

[Full-disclosure] [vuln.sg] AGEphone "sipd.dll" SIP Packet Handling Buffer Overflow

vuln.sg Vulnerability Research Advisory AGEphone "sipd.dll" SIP Packet Handling Buffer Overflow by Tan Chew Keong Release Date: 2006-07-25 Summary ------- A vulnerability has been found in AGEphone. When exploited, the vulnerability allows execution of arbitrary code with privileges of the AGEpho...

sipXtapi INVITE Message CSeq Field Header Remote Overflow

The remote host is running a SIP user agent that appears to be compiled using a version of SIP Foundry's SipXtapi library before March 24, 2006. Such versions contain a buffer overflow flaw that is triggered when processing a specially crafted packet with a long value for the 'CSeq' field. A remo...

AGEphone 1.281.38 - SIP Packet Handling Buffer Overflow (PoC)

AGEphone 1.281.38 - SIP Packet Handling Buffer Overflow PoC source: https://www.securityfocus.com/bid/19148/info AGEphone is prone to a remote buffer-overflow vulnerability. Specifically, this issue presents itself when the application handles a malicious SIP Session Initiation Protocol packet...

AGEphone 1.28/1.38 - SIP Packet Handling Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/19148/info AGEphone is prone to a remote buffer-overflow vulnerability. Specifically, this issue presents itself when the application handles a malicious SIP Session Initiation Protocol packet. AGEphone versions 1.24 and 1.38.1 are reported vulnerable;...

CVE-2006-3594

Buffer overflow in Cisco Unified CallManager CUCM 5.01 through 5.03a allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542...

sipXtapi Cseq header buffer overflow

Added: 07/17/2006 CVE: CVE-2006-3524 BID: 18906 OSVDB: 27122 Background The Session Initiation Protocol SIP is a signaling protocol for a variety of uses, including instant messanging and Voice over Internet Protocol. sipXtapi is a client library for SIP-based user agents. It is included in Pingt...

sipXtapi Cseq header buffer overflow

Added: 07/17/2006 CVE: CVE-2006-3524 BID: 18906 OSVDB: 27122 Background The Session Initiation Protocol SIP is a signaling protocol for a variety of uses, including instant messanging and Voice over Internet Protocol. sipXtapi is a client library for SIP-based user agents. It is included in Pingt...

sipXtapi Cseq header buffer overflow

Added: 07/17/2006 CVE: CVE-2006-3524 BID: 18906 OSVDB: 27122 Background The Session Initiation Protocol SIP is a signaling protocol for a variety of uses, including instant messanging and Voice over Internet Protocol. sipXtapi is a client library for SIP-based user agents. It is included in Pingt...

CVE-2006-3594

Buffer overflow in Cisco Unified CallManager CUCM 5.01 through 5.03a allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542...

CVE-2006-3594

CVE-2006-3594 refers to a buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1)–5.0(3a) that lets remote attackers execute arbitrary code via a long hostname in a SIP request (bug CSCsd96542). The issue affects CUCM and is ranked HIGH with CVSS v2 base score 7.5, vector AV:N/AC:L/Au:N/C:P/I:...

CVE-2006-3594: Undefined Security Weakness

Buffer overflow in Cisco Unified CallManager CUCM 5.01 through 5.03a allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542...