487 matches found
Wireshark -- Multiple vulnerabilities
Wireshark reports: It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by...
stun-version NSE Script
Sends a binding request to the server and attempts to extract version information from the response, if the server attribute is present. Script Arguments stun.mode See the documentation for the stun library. Example Usage nmap -sU -sV -p 3478 Script Output PORT STATE SERVICE VERSION 3478/udp open...
stun-info NSE Script
Retrieves the external IP address of a NAT:ed host using the STUN protocol. Script Arguments stun.mode See the documentation for the stun library. Example Usage nmap -sV -PN -sU -p 3478 --script stun-info Script Output PORT STATE SERVICE 3478/udp open|filtered stun | stun-info: | External IP:...
STUN Detection
The remote service supports the STUN Session Traversal Utilities for NAT protocol as described in RFC 5389. STUN helps client software behind a NAT router discover the external public address and the behavior of the router. Note that an earlier version of the protocol used a different acronym -...
Design/Logic Flaw
The 1 Airline Product Set aka ALPS, 2 Serial Tunnel Code aka STUN, 3 Block Serial Tunnel Code aka BSTUN, 4 Native Client Interface Architecture NCIA support, 5 Data-link switching aka DLSw, 6 Remote Source-Route Bridging RSRB, 7 Point to Point Tunneling Protocol PPTP, 8 X.25 for Record Boundary...
CVE-2009-0629
Cisco IOS DLSw feature (12.2, 12.3, 12.4, 15.0, 15.1) is affected by a DoS via a sequence of malformed packets exploiting a narrow timing window (Bug ID CSCtf74999). The related Red Hat/NVD entries describe that this vulnerability can cause device crashes or reloads. Mitigation details are not pr...
Asterisk多个远程拒绝服务漏洞
BUGTRAQ ID: 24950 CVECAN ID: CVE-2007-3763,CVE-2007-3764,CVE-2007-3765 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk...
ASA-2007-017: Remote Crash Vulnerability in STUN implementation
Asterisk Project Security Advisory - ASA-2007-017 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote Crash Vulnerability in STUN implementation |...
Asterisk VoIP server multiple security vulnerabilities
Buffer overflow and DoS on IAX2 implementation, DoS in Skinny and STUN implementation...
CVE-2007-3765
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...
CVE-2007-3765
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...
CVE-2007-3765
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...
Code injection
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...
DEBIAN-CVE-2007-3765
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...
CVE-2007-3765
The CVE-2007-3765 entry corresponds to a remote crash vulnerability in Asterisk’s STUN implementation. Affected are Asterisk Open Source 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2. The flaw arises when parsing inbound STUN attributes...
CVE-2007-3765
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...
CVE-2007-3765
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...
Detect STUN Server
A VPN server is listening on the remote port. Description : The remote host is running a STUN Simple Traversal of User Datagram Protocol - RFC 3489 server. Simple Traversal of User Datagram Protocol UDP Through Network Address Translators NATs STUN is a lightweight protocol that allows applicatio...
CVE-2004-1940
KPhone’s sipclient.cpp (versions 4.0.1 and earlier) is affected by a vulnerability where a STUN response with a large attrLen value triggers an out-of-bounds read, leading to remote denial of service (crash). The issue is disclosed across CVE-2004-1940 entries (NVD, CVE list, PT-2004-2837), consi...