Session fixation

Cisco IOS after 12.314T, 12.38YC1, 12.38YG, and 12.4, with voice support and without Session Initiated Protocol SIP configured, allows remote attackers to cause a denial of service crash by sending a crafted packet to port 5060/UDP...

Cisco IP telephony routers DoS

SIP packet UDP/5060 to device with vois over IP support, but not configured for SIP causes device to crash...

SIP Packets Reload IOS Devices with support for SIP

Cisco devices running an affected version of Internetwork Operating System IOS which supports Session Initiation Protocol SIP are affected by a vulnerability that may lead to a reload of the device when receiving a specific series of packets destined to port 5060. This issue is compounded by a...

Cisco routers and code execution with IP options DoS

ICMP, UDP or TCP packets with some IP options set can cause device reload and potentially code execution...

Code injection

AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...

CVE-2007-0431

AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...

CVE-2007-0431

CVE-2007-0431 affects AVM FRITZ!Box devices (e.g., Fritz!Box 7050) with a VoIP/SIP service. The vulnerability is triggered by sending a zero-length UDP packet to the SIP port (5060), which can cause a denial-of-service (VoIP application crash). Connected sources (NVD/OpenVAS) confirm the affected...

AVM FRITZ!Box VoIP远程拒绝服务漏洞

FRITZ！Box是AVM公司开发出的无线连接电脑与音响、电视的盒子，可以通过无线局域网连接将电脑里的所有数字内容传输到高档音响设备和大型等离子电视上。 FRITZ！Box在处理某些UDP报文时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击。 如果向Fritz!Box的5060 （SIP）端口发送了0长度的UDP报文的话，就会导致VoIP电话应用程序崩溃。 AVM Fritz!Box 7050 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

MOAB-02-01-2007: VLC Media Player udp:// Format String Vulnerability

Summary The following description of the software is provided by vendor VideoLAN: VideoLAN is a software project, which produces free software for video, released under the GNU General Public License. The main product is the cross-platform VLC media player. The VLC media player is a highly portab...

3Com TFTP Service <= 2.0.1 Remote Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ================================================================ 3Com TFTP Service 'TFTP Server 3CTftpSvc Buffer Overflow Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Description' = Pex::Text::Freeformqq This...

3Com TFTP Service (3CTftpSvc) 2.0.1 - Remote Buffer Overflow (Metasploit)

3Com TFTP Service 3CTftpSvc 2.0.1 - Remote Buffer Overflow Metasploit package Msf::Exploit::3comtftplongmode; use strict; use base "Msf::Exploit"; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'TFTP Server 3CTftpSvc Buffer Overflow Vulnerability', 'Version' = '$ 1.0 $',...

AVM Fritz!Box VoIP router DoS

Crash on empty UDP packet to UDP/5060 SIP port...

3Com TFTP Server Transporting Mode Remote Buffer Overflow (CVE-2006-6183)

Trivial File Transfer Protocol TFTP is a protocol used for transferringfiles, allowing remote users to download and upload files to the server. TheTFTP server communicates with clients over UDP port 69. 3Com TFTP Server is a TFTP server service used for easier transfer of filesto or from the...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow (1)

!/usr/bin/perl -w use IO::Socket; if!$ARGV1 print "Usage: tftpdwin-0-4-2.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 sulla porta $ARGV1"; my $nop0="\x90"x15; 8BC3 MOV EAX,EBX 66:05 1201 ADD AX,112 50 PUSH EAX C3 RETN...

TFTPDWIN 0.4.2 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================= TFTPDWIN 0.4.2 Remote Buffer Overflow Exploit ============================================= !/usr/bin/perl -w use IO::Socket; if!$ARGV1 print "Usage: tftpdwin-0-4-2.pl \n\n"; exit; $victim =...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow (1)

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow 1 !/usr/bin/perl -w use IO::Socket; if!$ARGV1 print "Usage: tftpdwin-0-4-2.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 sulla porta $ARGV1"; my...

ISS PAM.dll ICQ Parser Buffer Overflow

This module exploits a stack buffer overflow in the ISS products that use the iss-pam1.dll ICQ parser Blackice/RealSecure. Successful exploitation will result in arbitrary code execution as LocalSystem. This exploit only requires 1 UDP packet, which can be both spoofed and sent to a broadcast...

CVE-2006-6858

Miredo versions 0.9.8 through 1.0.5 fail to properly authenticate a Teredo bubble during UDP hole punching when using HMAC-MD5-64, enabling remote attackers to impersonate an arbitrary Teredo client. The vulnerability is described in CVE-2006-6858 and is evidenced in multiple data sources (NVD, C...

VLC Media Player畸形“udp://”URI格式串处理漏洞

VLC Media Player是一款免费的媒体释放器。 VLC Media Player在处理畸形的URI串时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 VLC Media Player在处理“udp://”开头的URI串时存在格式串处理漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页或打开恶意M3U文件控制用户机器。 VideoLAN VLC Media Player 0.x 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 不要打开来源不可信任的M3U文件。 厂商补丁： VideoLAN --------...

Teredo Server Detection

The remote host is running a Teredo server. Teredo is a protocol for tunneling IPv6 over UDP, and is used to give nodes the ability to obtain IPv6 connectivity behind IPv4 network address translation NAT devices. A Teredo server is a node that is connected to both IPv4 and IPv6 networks. C Tenabl...