Yate VoIP server DoS

NULL pointer dereference on absent "purpose" parameter of SIP "Call-Info" header...

Cross site request forgery (csrf)

The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service device reboot via a 0377 0xff character in the From header, and possibly certain other locations, in a SIP INVITE request...

CVE-2007-2270

The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service device reboot via a 0377 0xff character in the From header, and possibly certain other locations, in a SIP INVITE request...

CVE-2007-2270

CVE-2007-2270 affects the Linksys SPA941 VoIP Phone. The vulnerability is triggered by a 0xff character in the SIP INVITE From header (and possibly other locations), leading to a denial of service via device reboot. The available documents provide the impact and affected component but do not spec...

CVE-2007-2270

The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service device reboot via a 0377 0xff character in the From header, and possibly certain other locations, in a SIP INVITE request...

Lilnksys SPA941 VoIP phone DoS

Denial of Service on character with code 255 in SIP INVITE message...

[Full-disclosure] Linksys SPA941 remote DOS with \377 character

MADYNES Security Advisory http://madynes.loria.fr/ http://madynes.loria.fr Title: Linksys SPA941 remote DOS with 377 character Discovery Date: 01/02/2007 Vendor notification: 4/04/2007 and 17/04/2007 Release Date: 24/04/2007 Severity: Moderate - Denial of Service Advisory ID:KIHP3 Vulnerability i...

Apple Macintosh OS X VideoConference SIP heap buffer overflow

Overview The Apple VideoConference framework contains a buffer overflow vulnerability. If exploited, this vulnerability may allow an attacker to execute code. Description Apple's VideoConference framework is used in iChat and other applications to stream video. iChat uses SIP to make and receive...

Ekiga: Format string vulnerability

Background Ekiga is an open source VoIP and video conferencing application. Description Mu Security has discovered that Ekiga fails to implement formatted printing correctly. Impact An attacker could exploit this vulnerability to crash Ekiga and potentially execute arbitrary code by sending a...

[Full-disclosure] Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities Advisory ID: cisco-sa-20070328-voip http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml Revision 1.0 For Public Release 200...

SIPScan VOIP Vulnerability Scanner Detection

Binary data 3957.prm...

SIPScan VOIP Vulnerability Scanner Detection

Binary data 3956.prm...

Grandstream Budge Tone VOIP phones DoS

Crash on SIP protocol INVITE message parsing...

Cisco Phone 7940/7960 (SIP INVITE) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Title: Cisco 7940 SIP INVITE remote DOS Date: February 19, 2007 ID: KIPH2 Synopsis: After sending a cra fted INVITE message the device immediately reboots. The phone does not check properly the sipURI field of the ...

Re: [Full-disclosure] CISCO Phone 7940 DOS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This is in response to the e-mail posted by Radu State. The original e-mail is available at http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053070.html Hi Radu, Thanks for reporting this issue to Cisco's Product Security Incident Respons...

Grandstream Budge Tone-200 IP Phone - Digest domain Denial of Service

!/usr/bin/perl MADYNES Security Advisory http://madynes.loria.fr Title: Grandstream Budge Tone-200 denial of service vulnerability Release Date: 21/03/2007 Severity: High - Denial of Service Advisory ID:KIPH3 Hardware: Grandstream Budge Tone-200 IP Phone...

Cisco Phone 7940/7960 - 'SIP INVITE' Remote Denial of Service

!/usr/bin/perl Title: Cisco 7940 SIP INVITE remote DOS Date: February 19, 2007 ID: KIPH2 Synopsis: After sending a cra fted INVITE message the device immediately reboots. The phone does not check properly the sipURI field of the Remote-Party-ID in the message. The vendor was informed and...

[Full-disclosure] CISCO Phone 7940 DOS vulnerability

MADYNES Security Advisory http://madynes.loria.fr Severity: High Title: Cisco 7940 SIP INVITE remote DOS Date: February 19, 2007 ID: KIPH2 Synopsis: After sending a cra fted INVITE message the device immediately reboots. The phone does not check properly the sipURI field of the Remote-Party-ID in...

Cisco Phone 7940/7960 (SIP INVITE) Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc =================================================================== Cisco Phone 7940/7960 SIP INVITE Remote Denial of Service Exploit =================================================================== !/usr/bin/perl Title: Cisco 7940 SIP INVITE...

CVE-2006-7121

The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service reboot via 1 a long URL, or a long 2 username or 3 password during Basic Authentication...