FreePBX VoIP Administrative Interface Detection

Binary data 3802.prm...

Skinny Server Detection

The remote server is an H.323 proxy that understands the Skinny protocol, also known as SCCP, for 'Skinny Client Control Protocol'. Skinny is Cisco's proprietary lightweight terminal control protocol used by some VoIP phones to communicate with Cisco CallManager or Asterisk PBX systems. C Tenable...

Asterisk remote buffer overflow

Buffer overflow on parsing Cisco Skinny VoIP protocol...

CVE-2006-5233

Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service reboot via 1 a long URL sent to the HTTP daemon and 2 unspecified manipulations as demonstrated by the Nessus httpfingerprintinghmap.nasl script...

CVE-2006-5233

Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service reboot via 1 a long URL sent to the HTTP daemon and 2 unspecified manipulations as demonstrated by the Nessus httpfingerprintinghmap.nasl script...

CVE-2006-5233

Polycom SoundPoint IP 301 VoIP Desktop Phone running firmware version 1.4.1.0040 is affected. The vulnerability allows remote attackers to cause a denial of service (reboot) by sending a long URL to the device’s HTTP daemon and through unspecified manipulations demonstrated by the Nessus http_fin...

CVE-2006-5231

Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service hang or reboot via a large amount of ASCII data sent to port 1 5060/UDP, 2 5062/UDP, 3 5064/UDP, 4 5066/UDP, 5 9876/UDP, or 6 26789/UDP...

CVE-2006-5231

Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service hang or reboot via a large amount of ASCII data sent to port 1 5060/UDP, 2 5062/UDP, 3 5064/UDP, 4 5066/UDP, 5 9876/UDP, or 6 26789/UDP...

CVE-2006-5231

CVE-2006-5231 affects the Grandstream GXP-2000 VoIP Desktop Phone (firmware 1.1.0.5). The vulnerability allows remote attackers to cause a denial of service (hang or reboot) by sending a large amount of ASCII data to UDP ports 5060, 5062, 5064, 5066, 9876, or 26789. The impact is described as ava...

[Full-disclosure] (0-Day) GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS

Title: GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS Version: 1.1.0.5 Issues: 1.The phone has multiple undocumented open UDP ports, including 5062, 5064, 5066, 9876, 26789 2.Sending large amount of ascii data via NetCat to any open UDP port, including UDP/5060,...

[Full-disclosure] (0-day) Linksys SPA-921 VoIP Desktop Phone HTTP Server DoS

Title: Linksys SPA-921 VoIP Desktop Phone HTTP Server DoS Version: 1.0.0 Issues: 1.A long URL request to the phone's HTTP server will cause the phone to reboot. 2.A long username or password in the HTTP basic auth field will cause the phone to reboot. Credit: Shawn Merdinger, Independent Security...

Multiple VoIP phones vulnerabilities

Buffer overflows in integrated HTTP server. Buffer overflow on large UDP datagrams...

[Full-disclosure] (0-Day) PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42

Title: PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42 Version: 1.4.1.0040 Issues: 1.Phone reboots from the Nessus httpfingerprintinghmap.nasl script. 2.Phone reboots from a long URL sent to the HTTP daemon 3.Undocumented open port TCP/42 returns “Halt! Who goes...

Cisco Call Manager (VoIP) Administrative Interface Detection

Binary data 3770.prm...

Asterisk VoIP Administrative Interface Detection

Binary data 3769.prm...

Asterisk VoIP Server Detection

Binary data 3768.prm...

SiVus VOIP Vulnerability Scanner Detection (deprecated)

Binary data 3761.prm...

Sipsak VOIP Vulnerability Scanner Detection (deprecated)

Binary data 3765.prm...

CVE-2006-5038

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

CVE-2006-5038

The CVE-2006-5038 entry documents a vulnerability in the FiWin SS28S WiFi VoIP SIP/Skype Phone running firmware 01_02_07, where a hard-coded username and password enables remote administrative access via Telnet. This is a network-accessible issue with partial confidentiality, integrity, and avail...