eCentrex VOIP Client module (uacomx.ocx 2.0.1) Remote BOF Exploit

No description provided by source. !-- 17/08/2007 04.41.37 eCentrex VOIP Client module uacomx.ocx 2.0.1 remote buffer overflow exploit ie6 / xp sp2 passing more than 164 chars to ReInit method in Username argument EAX 41414131 ECX 0013D444 ASCII "AAAAAAAA... EDX 00000000 EBX 00000000 ESP 0013D3A0...

[Full-disclosure] 3 messsages attack remote DOS on Cisco 7940

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 3 February, 2007 ID: KIPH5 Synopsis After sending a series of three SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in March 2007 and...

CVE-2007-4291

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...

CVE-2007-4291

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...

CVE-2007-4291

Cisco IOS 12.0–12.4 vulnerability CVE-2007-4291 allows remote attackers to cause denial of service via malformed MGCP packets (hang) or malformed H.323/RTP packets (crash), with specific identifiers CSCsf08998, CSCsi60004/CSCsg70474, CSCse68138, and CSCse05642. Affected components include VOIP RT...

Cisco VoIP routers multiple DoS conditions

Multiple vulnerabilities in implementation of SIP, MGCP, H.323 and RTP protocols. Device may be vulnerable even i protocol is not configured...

Asterisk Skinny (SIP) VoIP protocol DoS

CAPABILITIESRESMESSAGE integer array overflow...

Asterisk VoIP server IAX2 DoS

NEW requests flood causes resources exhaustion...

Asterisk多个远程拒绝服务漏洞

BUGTRAQ ID: 24950 CVECAN ID: CVE-2007-3763,CVE-2007-3764,CVE-2007-3765 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk...

Asterisk VoIP server multiple security vulnerabilities

Buffer overflow and DoS on IAX2 implementation, DoS in Skinny and STUN implementation...

Asterisk VoIP server buffer overflow

Multiple buffer overflows if T38 fax over SIP is enabled...

vonage-default.txt

Vonage VoIP Telephone Adapter Default Misconfiguration The Vonage VoIP Telephone Adapter device is, by default, accessible from the WLAN/internet. The product ships with the default username of 'user' and default password of 'user' to access the administrative backend. Users are suggested to upda...

CVE-2007-3047

The Vonage VoIP Telephone Adapter has a default administrator username "user" and password "user," which allows remote attackers to obtain administrative access...

Default credentials

The Vonage VoIP Telephone Adapter has a default administrator username "user" and password "user," which allows remote attackers to obtain administrative access...

CVE-2007-3047

The CVE-2007-3047 vulnerability affects the Vonage VoIP Telephone Adapter, where a default admin username/password of user/user enables remote administrative access. According to the documented metrics, the issue has a CVSS v2 base score of 10.0 (HIGH) with network access, no authentication, and ...

CVE-2007-3047

The Vonage VoIP Telephone Adapter has a default administrator username "user" and password "user," which allows remote attackers to obtain administrative access...

Vonage VoIP phones weak defaults

Administrative interface in available via WAN connection with username/password of user/user...

Redlevel Advisory #025 - Vonage VoIP Telephone Adapter Default Misconfiguration

Vonage VoIP Telephone Adapter Default Misconfiguration The Vonage VoIP Telephone Adapter device is, by default, accessible from the WLAN/internet. The product ships with the default username of 'user' and default password of 'user' to access the administrative backend. Users are suggested to upda...

CVE-2007-2886

Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service card hang via unspecified vectors...

CVE-2007-2886

Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service card hang via unspecified vectors...