5437 matches found
AGEphone 1.281.38 - SIP Packet Handling Buffer Overflow (PoC)
AGEphone 1.281.38 - SIP Packet Handling Buffer Overflow PoC source: https://www.securityfocus.com/bid/19148/info AGEphone is prone to a remote buffer-overflow vulnerability. Specifically, this issue presents itself when the application handles a malicious SIP Session Initiation Protocol packet...
AGEphone 1.28/1.38 - SIP Packet Handling Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/19148/info AGEphone is prone to a remote buffer-overflow vulnerability. Specifically, this issue presents itself when the application handles a malicious SIP Session Initiation Protocol packet. AGEphone versions 1.24 and 1.38.1 are reported vulnerable;...
CVE-2006-3594
Buffer overflow in Cisco Unified CallManager CUCM 5.01 through 5.03a allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542...
sipXtapi Cseq header buffer overflow
Added: 07/17/2006 CVE: CVE-2006-3524 BID: 18906 OSVDB: 27122 Background The Session Initiation Protocol SIP is a signaling protocol for a variety of uses, including instant messanging and Voice over Internet Protocol. sipXtapi is a client library for SIP-based user agents. It is included in Pingt...
sipXtapi Cseq header buffer overflow
Added: 07/17/2006 CVE: CVE-2006-3524 BID: 18906 OSVDB: 27122 Background The Session Initiation Protocol SIP is a signaling protocol for a variety of uses, including instant messanging and Voice over Internet Protocol. sipXtapi is a client library for SIP-based user agents. It is included in Pingt...
sipXtapi Cseq header buffer overflow
Added: 07/17/2006 CVE: CVE-2006-3524 BID: 18906 OSVDB: 27122 Background The Session Initiation Protocol SIP is a signaling protocol for a variety of uses, including instant messanging and Voice over Internet Protocol. sipXtapi is a client library for SIP-based user agents. It is included in Pingt...
CVE-2006-3594
CVE-2006-3594 refers to a buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1)–5.0(3a) that lets remote attackers execute arbitrary code via a long hostname in a SIP request (bug CSCsd96542). The issue affects CUCM and is ranked HIGH with CVSS v2 base score 7.5, vector AV:N/AC:L/Au:N/C:P/I:...
CVE-2006-3594
Buffer overflow in Cisco Unified CallManager CUCM 5.01 through 5.03a allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542...
CVE-2006-3594: Undefined Security Weakness
Buffer overflow in Cisco Unified CallManager CUCM 5.01 through 5.03a allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542...
Multiple Cisco Unified CallManager security vulnerabilities
Multiple vulnerabilities with Command Line Interface and SIP protocol processing...
ERNW-02-2006.txt
ERNW Security Advisory 02-2006 Buffer Overflow in SIP Foundry's SipXtapi Author: Michael Thumann Homepage: www.ernw.de 1. Summary: The sipXtapi library from sip foundry contains a buffer overflow when parsing the CSeq field. This flaw can be used by an attacker to gain control over EIP and execut...
SipXtapi SIP library buffer overflow
Buffer overflow on CSeq field parsing...
[Full-disclosure] ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton)
ERNW Security Advisory 02-2006 Buffer Overflow in SIP Foundry's SipXtapi Author: Michael Thumann mthumannaternw.de Homepage: www.ernw.de 1. Summary: The sipXtapi library from sip foundry contains a buffer overflow when parsing the CSeq field. This flaw can be used by an attacker to gain control...
Current Versions Release History
Current Versions Release History 5.1c2 30-Jun-06 Valid Core License Keys: issued between 01-Jun-2004 and 31-Oct-2004, or on or after 01-Jun-2005. Admin: Lawful Intercept for Signals is implemented. WSSP: now all string prefixes HTML, JAVASCRIPT, etc. support numeric data. XIMSS: the Signal...
CVE-2006-2924: Undefined Security Weakness
Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake...
kphone SIP VoIP software solution weak permissions
.qt/kphonerc file is world-readable and contains sensitive information, including SIP accounts...
[SECURITY] [DSA 1062-1] New kphone packages fix information disclosure
-------------------------------------------------------------------------- Debian Security Advisory DSA 1062-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19th, 2006 http://www.debian.org/security/faq -...
DSA-1062-1 kphone - insecure file creation
Bulletin has no description...
