VoIP-Phones: Weakness in proccessing SIP-Notify-Messages

Tele-Consulting GmbH security | networking | training advisory 05/07/06 URL of this advisory: http://pentest.tele-consulting.com/advisories/050706voip-phones.txt Topic: Weakness in implemenation of proccessing SIP-Notify-Messages in VoIP-Phones. Summary: Due to ignoring the value of 'Call-ID' and...

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling

source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The issue arises because the affected phones do not verify the 'Call-ID...

CVE-2002-1934

CVE-2002-1934 affects Pingtel xpressa SIP-based VoIP phones version 1.2.5 through 2.0.1. The vulnerability leaks sensitive information during boot-up, allowing an attacker to obtain the MD5 hashes of the Admin password, the physical password, and other registration data. The available connected s...

CVE-2002-1934

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information...

Asterisk VOIP PBX software buffer overflow

Stack overflow on CLi commands processing...

CVE-2004-1977

CVE-2004-1977 affects 3Com NBX VoIP NetSet Configuration Manager. OpenVAS/Open source notes describe that remote attackers can trigger a denial-of-service (crash) by running a Nessus scan with safeChecks enabled against the web interface. The CVE records indicate an unauthenticated, network-based...

CVE-2004-1977

3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service crash via a Nessus scan in safeChecks mode...

CVE-2004-1977: Undefined Security Weakness

3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service crash via a Nessus scan in safeChecks mode...

Policy - TeamSpeak Online Gaming VoIP Server Detection

Binary data 2734.prm...

[NEWS] UTStarcom's iAN-02EX Remote Access Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-0745

The CVE-2005-0745 entry concerns UTStarcom iAN-02EX VoIP ATA. A local attacker can bypass ATA access restrictions by dialing *#26845#, which triggers a device reset. This is a local-attack scenario with partial confidentiality/integrity/availability impact per CVSSv2 (AV:L, AC:L, I:P, A:P). No ex...

CVE-2005-0745

UTStarcom iAN-02EX VoIP Analog Terminal Adaptor ATA allows local users to bypass ATA access restrictions by dialing "26845" and causing a device reset...

CVE-2005-0745: Undefined Security Weakness

UTStarcom iAN-02EX VoIP Analog Terminal Adaptor ATA allows local users to bypass ATA access restrictions by dialing "26845" and causing a device reset...

CVE-2003-1114

The CVE-2003-1114 entry concerns Mediatrix Telecom SIP implementations on VoIP Access Devices and Gateways with SIPv2.4/SIPv4.3 firmware. A remote attacker can cause a denial of service or execute arbitrary code by sending crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip tests...

CVE-2003-1114: Undefined Security Weakness

The Session Initiation Protocol SIP implementation in Mediatrix Telecom VoIP Access Devices and Gateways running SIPv2.4 and SIPv4.3 firmware allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip tes...

CVE-2005-0745

UTStarcom iAN-02EX VoIP Analog Terminal Adaptor ATA allows local users to bypass ATA access restrictions by dialing "26845" and causing a device reset...

CVE-2002-0668

The CVE-2002-0668 issue affects Pingtel xpressa SIP phones (software versions 1.2.5–1.2.7.4). A web interface vulnerability allows an authenticated user to modify Call Forwarding settings, hijacking calls by redirecting them to another SIP URL or number. The root cause is exposure of administrati...

CVE-2002-0835

The CVE-2002-0835 issue affects the PXE (Preboot eXecution Environment) server component used on Linux-like systems (e.g., Red Hat Advanced Server) and SCO OpenLinux. Description across connected sources states that the PXE server can be crashed, causing a denial of service, when processing certa...

CVE-2002-0835

Preboot eXecution Environment PXE server allows remote attackers to cause a denial of service crash via certain DHCP packets from Voice-Over-IP VOIP phones...

CVE-2002-0672

The CVE-2002-0672 entry concerns Pingtel xpressa SIP phones (versions 1.2.5–1.2.7.4) where the administrator password is null due to a factory reset without authentication via the GUI. The linked advisory and CVE records detail multiple issues affecting PX-1 devices, including local/remote admini...