1445 matches found
IAXclient truncated frames vulnerabilities
Advisory ID Internal CORE-2006-0327 Date Published: 2006-06-09 Last Update: 2006-06-09 Advisory ID: CORE-2006-0327 Bugtraq ID: 18307 CVE Name: CVE-2006-2923 Title: IAXclient truncated frames vulnerabilities Class: Input Validation Error Remotely Exploitable: Yes Locally Exploitable: Yes Vendors...
Hack technology: VoIP traversal of NAT and firewall approaches-vulnerability warning-the black bar safety net
, NAT/ALG mode Ordinary NAT is done by modifying the UDP or TCP packet header address information to achieve the address, but for VOIP application in TCP/UDP payload is also the need to bring the address information of the ALG mode refers to the private network in the VOIP terminal in the payload...
kphone SIP VoIP software solution weak permissions
.qt/kphonerc file is world-readable and contains sensitive information, including SIP accounts...
DSA-1062-1 kphone - insecure file creation
Bulletin has no description...
Session fixation
Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol SIP messages...
CVE-2006-1973
Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol SIP messages...
CVE-2006-1973
CVE-2006-1973 affects Linksys RT31P2 VoIP router. It describes multiple unspecified vulnerabilities allowing remote attackers to cause a denial of service via malformed SIP messages. NVD lists a Network attack vector, low complexity, no authentication, with a base score of 5.0 (Medium) and partia...
Linksys RT31P2 VoIP router denial of service vulnerabilities
Overview The Linksys RT31P2 VoIP router contains several vulnerabilities that may allow a remote, unauthenticated attacker to cause a denial of service. Description The Linksys RT31P2 is a broadband router that includes Voice over Internet Protocol VoIP telephone functionality. The RT31P2 unit...
Unsniff Network Analyzer 1.0 (usnf) Local Heap Overflow PoC
Exploit for unknown platform in category dos / poc =========================================================== Unsniff Network Analyzer 1.0 usnf Local Heap Overflow PoC =========================================================== !/usr/bin/perl Unsniff Network Analyzer 1.0 usnf Local Heap Overflow...
TFTP File Detection (Cisco CallManager) - Active Check
The remote host has a TFTP server installed that is serving one or more Cisco CallManager files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Design/Logic Flaw
Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attackers to obtain sensitive information on the device such as telephone numbers called, and possibly connect to other hosts. NOTE: it is possible that this...
CVE-2006-0834
Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attackers to obtain sensitive information on the device such as telephone numbers called, and possibly connect to other hosts. NOTE: it is possible that this...
CVE-2006-0834
The CVE-2006-0834 entry affects the Uniden UIP1868P VoIP Telephone and Router, where a default web‑config password of admin can allow remote attackers to obtain sensitive device data (e.g., called numbers) and potentially connect to other hosts. The description notes that the default may have bee...
CVE-2006-0834
Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attackers to obtain sensitive information on the device such as telephone numbers called, and possibly connect to other hosts. NOTE: it is possible that this...
CVE-2006-0834: Undefined Security Weakness
Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attackers to obtain sensitive information on the device such as telephone numbers called, and possibly connect to other hosts. NOTE: it is possible that this...
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service
source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP...
eStara SoftPhone 3.0.1 SIP Packet - Multiple Malformed Field Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. For the negative 'Expires' field issue: OPTIONS sip:[email protected] SIP/2.0 Via...
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to...
eStara SoftPhone 3.0.1 SIP Packet - Multiple Malformed Field Denial of Service Vulnerabilities
eStara SoftPhone 3.0.1 SIP Packet - Multiple Malformed Field Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause t...