Multiple VoIP phones vulnerabilities

Buffer overflows in integrated HTTP server. Buffer overflow on large UDP datagrams...

[Full-disclosure] (0-day) Linksys SPA-921 VoIP Desktop Phone HTTP Server DoS

Title: Linksys SPA-921 VoIP Desktop Phone HTTP Server DoS Version: 1.0.0 Issues: 1.A long URL request to the phone's HTTP server will cause the phone to reboot. 2.A long username or password in the HTTP basic auth field will cause the phone to reboot. Credit: Shawn Merdinger, Independent Security...

[Full-disclosure] (0-Day) GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS

Title: GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS Version: 1.1.0.5 Issues: 1.The phone has multiple undocumented open UDP ports, including 5062, 5064, 5066, 9876, 26789 2.Sending large amount of ascii data via NetCat to any open UDP port, including UDP/5060,...

Asterisk VoIP Administrative Interface Detection

Binary data 3769.prm...

Cisco Call Manager (VoIP) Administrative Interface Detection

Binary data 3770.prm...

Asterisk VoIP Server Detection

Binary data 3768.prm...

Sipsak VOIP Vulnerability Scanner Detection (deprecated)

Binary data 3765.prm...

SiVus VOIP Vulnerability Scanner Detection (deprecated)

Binary data 3761.prm...

CVE-2006-5038

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

CVE-2006-5038

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

CVE-2006-5038

The CVE-2006-5038 entry documents a vulnerability in the FiWin SS28S WiFi VoIP SIP/Skype Phone running firmware 01_02_07, where a hard-coded username and password enables remote administrative access via Telnet. This is a network-accessible issue with partial confidentiality, integrity, and avail...

CVE-2006-5038: Undefined Security Weakness

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

[Full-disclosure] Cisco 7905 VoIP phone crashing from dsniff arpspoof?

In the readme in the ohrwurm tarball from Matthius Wenzel's site: http://mazzoo.de/blog/2006/08/25ohrwurm snip SUCCESS As of August 2006 ohrwurm broke the following applications/transports: - linphonec 1.10 / iLBC stops sending RTP, no crash - linphonec 1.10 / iLBC re-negotiates PCMA via SIP, but...

Cisco 7905 SIP/SCCP/H.323 VoIP phone DoS

DoS on dsniff arp spoofing...

Asteriks PBX / VoIP solution buffer overflow

Buffer overflow in MGCP inplementation on AUEP message parsing...

Security Best Practice: MGCP Protocol Enforcement

MGCP is an implementation of the Media Gateway Control Protocol architecture1 for controlling Media Gateways on Internet Protocol IP networks and the public switched telephone network PSTN.MGCP is a signaling and call control protocol used within Voice over IP VoIP systems that typically...

Kiax: Arbitrary code execution

Background Kiax is a graphical softphone supporting the IAX protocol Inter Asterisk eXchange, which allows PC users to make VoIP calls to Asterisk servers. Description The iaxnetread function in the iaxclient library fails to properly handle IAX2 packets with truncated full frames or mini-frames...

Asterisk IAX2 VoIP PBX and multiple IAX clients DoS

DoS on IAX2 channel processing...

IAXClient Open Source Library iax_net_read Function Packet Handling Remote Overflow

The remote host appears to be using a VoIP software phone application that is affected by multiple buffer overflows. With specially crafted UDP packets, an unauthenticated, remote attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the...

CORE-2006-0327: IAXclient truncated frames vulnerabilities

Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ IAXclient truncated frames vulnerabilities Date Published: 2006-06-09 Last Update: 2006-06-09 Advisory ID: CORE-2006-0327 Bugtraq ID: 18307 CVE Name: N/A Title: IAXclient truncated frames vulnerabilities Class:...