CVE-2006-5038

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

Cisco 7905 SIP/SCCP/H.323 VoIP phone DoS

DoS on dsniff arp spoofing...

[Full-disclosure] Cisco 7905 VoIP phone crashing from dsniff arpspoof?

In the readme in the ohrwurm tarball from Matthius Wenzel's site: http://mazzoo.de/blog/2006/08/25ohrwurm snip SUCCESS As of August 2006 ohrwurm broke the following applications/transports: - linphonec 1.10 / iLBC stops sending RTP, no crash - linphonec 1.10 / iLBC re-negotiates PCMA via SIP, but...

Asteriks PBX / VoIP solution buffer overflow

Buffer overflow in MGCP inplementation on AUEP message parsing...

Security Best Practice: MGCP Protocol Enforcement

MGCP is an implementation of the Media Gateway Control Protocol architecture1 for controlling Media Gateways on Internet Protocol IP networks and the public switched telephone network PSTN.MGCP is a signaling and call control protocol used within Voice over IP VoIP systems that typically...

Asterisk IAX2 VoIP PBX and multiple IAX clients DoS

DoS on IAX2 channel processing...

Kiax: Arbitrary code execution

Background Kiax is a graphical softphone supporting the IAX protocol Inter Asterisk eXchange, which allows PC users to make VoIP calls to Asterisk servers. Description The iaxnetread function in the iaxclient library fails to properly handle IAX2 packets with truncated full frames or mini-frames...

IAXClient Open Source Library iax_net_read Function Packet Handling Remote Overflow

The remote host appears to be using a VoIP software phone application that is affected by multiple buffer overflows. With specially crafted UDP packets, an unauthenticated, remote attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the...

CORE-2006-0327: IAXclient truncated frames vulnerabilities

Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ IAXclient truncated frames vulnerabilities Date Published: 2006-06-09 Last Update: 2006-06-09 Advisory ID: CORE-2006-0327 Bugtraq ID: 18307 CVE Name: N/A Title: IAXclient truncated frames vulnerabilities Class:...

IAXclient truncated frames vulnerabilities

Advisory ID Internal CORE-2006-0327 Date Published: 2006-06-09 Last Update: 2006-06-09 Advisory ID: CORE-2006-0327 Bugtraq ID: 18307 CVE Name: CVE-2006-2923 Title: IAXclient truncated frames vulnerabilities Class: Input Validation Error Remotely Exploitable: Yes Locally Exploitable: Yes Vendors...

Hack technology: VoIP traversal of NAT and firewall approaches-vulnerability warning-the black bar safety net

, NAT/ALG mode Ordinary NAT is done by modifying the UDP or TCP packet header address information to achieve the address, but for VOIP application in TCP/UDP payload is also the need to bring the address information of the ALG mode refers to the private network in the VOIP terminal in the payload...

kphone SIP VoIP software solution weak permissions

.qt/kphonerc file is world-readable and contains sensitive information, including SIP accounts...

DSA-1062-1 kphone - insecure file creation

Bulletin has no description...

Session fixation

Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol SIP messages...

CVE-2006-1973

CVE-2006-1973 affects Linksys RT31P2 VoIP router. It describes multiple unspecified vulnerabilities allowing remote attackers to cause a denial of service via malformed SIP messages. NVD lists a Network attack vector, low complexity, no authentication, with a base score of 5.0 (Medium) and partia...

CVE-2006-1973

Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol SIP messages...

Linksys RT31P2 VoIP router denial of service vulnerabilities

Overview The Linksys RT31P2 VoIP router contains several vulnerabilities that may allow a remote, unauthenticated attacker to cause a denial of service. Description The Linksys RT31P2 is a broadband router that includes Voice over Internet Protocol VoIP telephone functionality. The RT31P2 unit...

Unsniff Network Analyzer 1.0 (usnf) Local Heap Overflow PoC

Exploit for unknown platform in category dos / poc =========================================================== Unsniff Network Analyzer 1.0 usnf Local Heap Overflow PoC =========================================================== !/usr/bin/perl Unsniff Network Analyzer 1.0 usnf Local Heap Overflow...

TFTP File Detection (Cisco CallManager) - Active Check

The remote host has a TFTP server installed that is serving one or more Cisco CallManager files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Design/Logic Flaw

Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attackers to obtain sensitive information on the device such as telephone numbers called, and possibly connect to other hosts. NOTE: it is possible that this...