1293 matches found
IT-Grundschutz M4.287: Sichere Administration der VoIP-Middleware
IT-Grundschutz M4.287: Sichere Administration der VoIP-Middleware. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94226 Diese Prüfung bezieht sich auf die 12...
IT-Grundschutz M4.287: Sichere Administration der VoIP-Middleware
IT-Grundschutz M4.287: Sichere Administration der VoIP-Middleware. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94226 Diese Prüfung bezieht sich auf die 12...
IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten
IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94228 Diese Prüfung bezieht sich auf die 12...
Federal Trojan's Got A "Big Brother"
About two weeks ago, the German Chaos Computer Club CCC has published an analysis report of a backdoor trojan that they claim had been used by German police during investigations in order to capture VoIP and IM communication on a suspect’s PC. Our friends over at F-Secure published a blog post la...
Skype 0 Day Exploitation Presentation - HITB Malaysia 2011
Document Title: =============== Skype 0 Day Exploitation Presentation - HITB Malaysia 2011 References: =========== Presentation: https://www.vulnerability-lab.com/resources/documents/294.pdf Documentation: https://www.vulnerability-lab.com/getcontent.php?id=293 Speaker:...
BackBox Linux 2 released
BackBox Linux 2 released The BackBox team is proud to announce the release of BackBox. Linux 2.BackBox 2 features the following upstream components: Ubuntu 11.04, Linux Kernel 2.6.38 and Xfce 4.8. BackBox is an Ubuntu-based distribution developed to perform penetration tests and security...
Hackers Push Sipvicious VoIP Tools In Malicious Attacks
Researchers at NSS Labs claim that they’ve spotted attacks that use Sipvicious, a common auditing tool for Voice over IP VoIP networks as part of malicious attacks aimed at taking control of vulnerable VoIP servers. The attacks are apparently aimed at taking control of VoIP servers to place...
Skype多个字段多个HTML注入漏洞
Bugtraq ID: 49194 Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务。 Skype不正确过滤下面用户信息条目中的输入和输出： - home - office - mobile 攻击者可以进行跨站脚本攻击，可能获得敏感信息或劫持用户会话。 Skype Technologies Skype 4.2 169 Skype Technologies Skype 4.2 155 Skype Technologies Skype 4.2 152 Skype Technologies Skype 4.1 .179 Skype Technologies Skype 4...
Moshi Moshi : VoIP bot written in Python
Moshi Moshi : VoIP bot written in Python Moshi Moshi is a VoIP Bot written in Python that uses SIP as VoIP Protocol, Text-to-speech engines for Output, and DTMF Tones for Input. It is part of a talk "Sounds Like Botnet" given at DEF CON 19 and BSidesLV 2011 on VoIP Botnets by Itzik Kotler and...
Moshi Moshi : VoIP bot written in Python
Moshi Moshi : VoIP bot written in Python Moshi Moshi is a VoIP Bot written in Python that uses SIP as VoIP Protocol, Text-to-speech engines for Output, and DTMF Tones for Input. It is part of a talk "Sounds Like Botnet " given at DEF CON 19 and BSidesLV 2011 on VoIP Botnets by Itzik Kotler and...
BlackBuntu V0.3 Released
BlackBuntu V0.3 Released For Blackbuntu 0.3 we are supporting both x86 and x8664 architectures.Security and Penetration Testing tools available in Blackbuntu : Information Gathering Network Mapping Vulnerability Identification Penetration Privilege Escalation Maintaining Access Radio Network...
Ventrilo v3.0.5 v3.0.4 - Stack Buffer Overflow Vulnerability
Document Title: =============== Ventrilo v3.0.5 v3.0.4 - Stack Buffer Overflow Vulnerability Release Date: ============= 2011-07-22 Vulnerability Laboratory ID VL-ID: ==================================== 98 Product & Service Introduction: =============================== Ventrilo 3.0.0 is the next...
Ventrilo v3.0.5 v3.0.4 - Stack Buffer Overflow Vulnerability
Document Title: =============== Ventrilo v3.0.5 v3.0.4 - Stack Buffer Overflow Vulnerability Release Date: ============= 2011-07-22 Vulnerability Laboratory ID VL-ID: ==================================== 98 Product & Service Introduction: =============================== Ventrilo 3.0.0 is the next...
Manageengine Opmanager v8.8 - SQL Injection Vulnerability
Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...
Manageengine Opmanager v8.8 - SQL Injection Vulnerability
Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...
[SECURITY] Fedora 14 Update: asterisk-1.6.2.19-1.fc14
Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...
Portech MV-372 VoIP Gateway - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/48560/info The Portech MV-372 VoIP Gateway is prone to multiple security vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information, cause vulnerable devices to crash resulting in a denial-of-service condition, or...
Portech MV-372 VoIP Gateway - Multiple Vulnerabilities
Portech MV-372 VoIP Gateway - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/48560/info The Portech MV-372 VoIP Gateway is prone to multiple security vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information, cause vulnerable devices to...
Portech MV-372 Denial Of Service / Bypass
Portech MV-372 Mobile VoIP Multiple Vulnerabilities 1. Description Multiple vulnerabilities have been found in Portech MV-372 Mobile VoIP Gateway which allows an attacker to compromise the device and/or initiate a denial of service attack against its telnet service. The Device details section...
Nmap NSE net: iax2-version
Detects the UDP IAX2 service. The script sends an Inter-Asterisk eXchange IAX Revision 2 Control Frame POKE request and checks for a proper response. This protocol is used to enable VoIP connections between servers as well as client-server communication. SPDX-FileCopyrightText: 2011 Greenbone AG...