CVE-2002-0670: Undefined Security Weakness

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing...

CVE-2002-0675: Undefined Security Weakness

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...

CVE-2002-0667: Undefined Security Weakness

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone...

@stake Advisory: Multiple Vulnerabilities with Pingtel xpressa SIP Phones

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: Multiple Vulnerabilities with Pingtel xpressa SIP Phones Release Date: 07/12/2002 Hardware: Pingtel xpressa SIP VoIP phones model PX-1 Software: Versions 1.2.5-1.2.7.4 Platform: VxWorks...

CVE-1999-0938

MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol SIP messages...

CVE-1999-0938

CVE-1999-0938 involves the MBone SDR Package, which is vulnerable to remote command execution via shell metacharacters in SIP messages. The concrete details indicate the affected software (MBone SDR Package) and the vulnerable component (SIP message handling that allows shell metacharacter input)...

CVE-1999-0938: Undefined Security Weakness

MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol SIP messages...

Security update 1970-01-01

...