Policy - TeamSpeak Online Gaming VoIP Server Detection

Binary data 2734.prm...

[NEWS] UTStarcom's iAN-02EX Remote Access Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-0745

UTStarcom iAN-02EX VoIP Analog Terminal Adaptor ATA allows local users to bypass ATA access restrictions by dialing "26845" and causing a device reset...

CVE-2005-0745

The CVE-2005-0745 entry concerns UTStarcom iAN-02EX VoIP ATA. A local attacker can bypass ATA access restrictions by dialing *#26845#, which triggers a device reset. This is a local-attack scenario with partial confidentiality/integrity/availability impact per CVSSv2 (AV:L, AC:L, I:P, A:P). No ex...

CVE-2003-1114

The CVE-2003-1114 entry concerns Mediatrix Telecom SIP implementations on VoIP Access Devices and Gateways with SIPv2.4/SIPv4.3 firmware. A remote attacker can cause a denial of service or execute arbitrary code by sending crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip tests...

CVE-2005-0745

UTStarcom iAN-02EX VoIP Analog Terminal Adaptor ATA allows local users to bypass ATA access restrictions by dialing "26845" and causing a device reset...

CVE-2002-0672

The CVE-2002-0672 entry concerns Pingtel xpressa SIP phones (versions 1.2.5–1.2.7.4) where the administrator password is null due to a factory reset without authentication via the GUI. The linked advisory and CVE records detail multiple issues affecting PX-1 devices, including local/remote admini...

CVE-2002-0835

Preboot eXecution Environment PXE server allows remote attackers to cause a denial of service crash via certain DHCP packets from Voice-Over-IP VOIP phones...

CVE-2002-0835

The CVE-2002-0835 issue affects the PXE (Preboot eXecution Environment) server component used on Linux-like systems (e.g., Red Hat Advanced Server) and SCO OpenLinux. Description across connected sources states that the PXE server can be crashed, causing a denial of service, when processing certa...

CVE-2002-0668

The CVE-2002-0668 issue affects Pingtel xpressa SIP phones (software versions 1.2.5–1.2.7.4). A web interface vulnerability allows an authenticated user to modify Call Forwarding settings, hijacking calls by redirecting them to another SIP URL or number. The root cause is exposure of administrati...

H323 Protocol / VoIP Application Detection

H323 is a protocol used all over the Internet. It is used for Voice Over IP VoIP, Microsoft NetMeeting, and countless other applications. Nessus was able to determine that the remote device supports the H323 protocol. Make sure the use of this program is done in accordance with your corporate...

CVE-2004-1977

3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service crash via a Nessus scan in safeChecks mode...

CERT Advisory CA-2004-01 Multiple H.323 Message Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2004-01 Multiple H.323 Message Vulnerabilities Original release date: January 13, 2004 Last revised: -- Source: CERT/CC, NISCC A complete revision history can be found at the end of this file. Systems Affected Many software and hardware systems...

Multiple vulnerabilities in H.323 implementations

Overview A number of vulnerabilities have been discovered in various implementations of the multimedia telephony protocols H.323 and H.225. Voice over Internet Protocol VoIP and video conferencing equpiment and software can use these protocols to interoperate over a variety of computer networks...

[UNIX] Asterisk CallerID CDR SQL Injection

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

ACME-mitel.txt

There is an interesting bug in a Mitel's servers for Voice over IP that allows to discover the numbers called and the numbers calling trought this dhcp server. This server is configurable via http interface and via telnet; in this case, if there is a call at moment of login/pass request, I've not...

CVE-2002-0671

CVE-2002-0671 affects Pingtel xpressa SIP-based VoIP phones, versions 1.2.5–1.2.7.4. The issue arises when the device downloads applications from a web site without verifying their integrity, enabling remote attackers to install Trojan horse applications via DNS spoofing. The vulnerability is doc...

CVE-2002-0669

The CVE-2002-0669 issue affects Pingtel xpressa SIP-based phones (versions 1.2.5–1.2.7.4). By changing SIP_AUTHENTICATE_SCHEME, an attacker can force authentication of incoming calls, causing a denial of service where neither caller nor callee is informed of the failure. The vulnerability stems f...

3Com SuperStack 3 NBX 4.04.1 - FTPD Denial of Service

3Com SuperStack 3 NBX 4.04.1 - FTPD Denial of Service source: https://www.securityfocus.com/bid/6297/info It has been reported that the ftpd server, included in the Embedded Real Time Operating System ERTOS of 3Com Superstack 3 NBX IP phones, contains a denial of service vulnerability. This issue...

3Com SuperStack 3 NBX 4.0/4.1 - FTPD Denial of Service

source: https://www.securityfocus.com/bid/6297/info It has been reported that the ftpd server, included in the Embedded Real Time Operating System ERTOS of 3Com Superstack 3 NBX IP phones, contains a denial of service vulnerability. This issue can be triggered by sending a CEL paramater of...