IT-Grundschutz M4.287: Sichere Administration der VoIP-Middleware

IT-Grundschutz M4.287: Sichere Administration der VoIP-Middleware. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94226 Diese Prüfung bezieht sich auf die 11...

Digium Asterisk Invalid RTP Payload Type Number Memory Corruption (CVE-2008-1289)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

Skype Security On the Business Hot Seat

Michael Gough, an information security specialist and president of the Austin, Texas, chapter of ISSA, owner of the web site skypetips.com gave CSO his thoughts on Skype’s benefits and security challenges in the business environment. Read the full article. CSO...

Hacker Pleads Guilty to Major VoIP Theft

Miami hacker, Edwin Andrew Pena, has admitted to a Federal New Jersey court that he pocketed more than $1m by selling millions of minutes of voice over IP calls and surreptitiously routing them through the networks of telecommunications companies. Read the full article. The Register...

[SECURITY] Fedora 11 Update: asterisk-1.6.1.8-1.fc11

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Microsoft Windows License Logging Server Remote Heap Buffer Overflow Vulnerability

Description The Microsoft Windows License Logging Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges...

Skype skype4com URI Handler Remote Heap Corruption (CVE-2007-5989)

Skype is a peer-to-peer Voice over IP VoIP Internet telephony network solution. The product is used to transfer real time conversations between two peers over the Internet. Skype users can speak to other Skype users, receive calls from traditional phones, and receive voice-mail messages. Peers ar...

Cisco Security Advisory: Cisco IOS Software H.323 Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software H.323 Denial of Service Vulnerability Advisory ID: cisco-sa-20090923-h323 Revision 1.0 For Public Release 2009 September 23 +--------------------------------------------------------------------- Summary...

Swiss Coder Publicises Government Spy Trojan

A software engineer who created Trojans for the Swiss authorities to intercept Voice-over-IP VoIP phone calls has published the source code to his programs in order to draw attention to the surveillance threat posed by such software. Read the full story idg.no...

Code injection

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service disconnected calls and device reboot via a crafted SIP packet to UDP port 5060...

CVE-2008-7065

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service disconnected calls and device reboot via a crafted SIP packet to UDP port 5060...

CVE-2008-7065

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service disconnected calls and device reboot via a crafted SIP packet to UDP port 5060...

CVE-2008-7065

The CVE-2008-7065 entry describes a vulnerability in Siemens C450 IP and C475 IP VoIP devices where remote attackers can cause a denial of service by sending a crafted SIP packet to UDP port 5060. The impact reported is disconnected calls and device reboot . The core issue is triggered via crafte...

Snom VoIP/SIP Phone Bypass

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Snom VoIP/SIP Phones Snom300, Snom320, Snom360, Snom370, Snom820 Vendor: snom technology AG CVD ID: CVE-2009-1048 Subject: Authentication Bypass of Snom Phone Web Interface Risk: High Effect: Remote Author: Walter...

CVE-2009-1048

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a 1 http or ...

Authentication flaw

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a 1 http or ...

CVE-2009-1048

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a 1 http or ...

CVE-2009-1048

CVE-2009-1048 affects snom VoIP/SIP phones (models 300/320/360/370/820). The web interface can be accessed without authentication by sending an HTTP/HTTPS request with Host: 127.0.0.1, bypassing authentication and enabling reconfiguration or arbitrary use. Affected firmware versions are 6.5.x bef...

SNOM VoIP phones authentication bypass

Web interface access authentication bypass...

Authentication Bypass of Snom Phone Web Interface

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Snom VoIP/SIP Phones Snom300, Snom320, Snom360, Snom370, Snom820 Vendor: snom technology AG CVD ID: CVE-2009-1048 Subject: Authentication Bypass of Snom Phone Web Interface Risk: High Effect: Remote Author: Walter...