CVE-2009-2547

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

Integer overflow

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

CVE-2009-2547

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

CVE-2009-2547

CVE-2009-2547 describes an integer underflow in ArmA (Armed Assault) up to version 1.14 and earlier, and ArmA 1.16 beta, and ArmA II up to version 1.02 and earlier. A remote attacker can send a VoIP over Network (VON) packet to port 2305 with a negative packet_size value, triggering a buffer over...

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)

!/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploits found with this code can be found at http://www.securityscraper.com/ Released under the VoIPER project Do not hesitate to show enthusiasm and support and help develop this further. use strict; use IO::Socket; use...

VOIP Dashboard SQL Injection

--------------------------------------------------------------------------------------------- + VOIP Dashboard Auth BypassSQL Injection vulnerability + Found By: Rohit Bansal SCHAP Security http://schap.org + Date: 02-06-2009...

Asterisk VoIP server user accounts enumeration

Different replies for non-exstant SIP account and invalid password...

Unsniff Network Analyzer 1.0 - 'usnf' Local Heap Overflow (PoC)

!/usr/bin/perl Unsniff Network Analyzer 1.0 usnf Local Heap Overflow PoC Summary: Dont just look at hex dumps and protocol trees. With Unsniff Network Analyzer, you can view network traffic at various levels of detail. View high level objects like images, video, HTML pages, VOIP calls, drill down...

Asterisk认证SIP响应用户名枚举漏洞

BUGTRAQ ID: 34353 CVECAN ID: CVE-2008-3903 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 如果启用了Digest认证的话，Asterisk PBX对登录期间所尝试的有效和无效SIP用户名会返回不同的响应，远程攻击者可以通过暴力猜测枚举出有效的用户名。 Asterisk Asterisk 1.6.0.x Asterisk Asterisk 1.4.x Asterisk Asterisk 1.2.x Asterisk Business Edition C.2.x.x Asterisk Business Edition...

Cracking SIP passwords with SIP Digest Leak

VoIP phones have taken off in both the enterprise and the consumer markets, thanks to their ease of deployment and low operating costs. But, as this video from Enablesecurity shows, there are a number of security risks that have yet to be addressed...

Asterisk VoIP server DoS

NULL pointer dereference on empty SIP INVITE header...

Fedora Update for speex FEDORA-2008-3191

Check for the Version of speex OpenVAS Vulnerability Test Fedora Update for speex FEDORA-2008-3191 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for speex FEDORA-2008-3103

Check for the Version of speex OpenVAS Vulnerability Test Fedora Update for speex FEDORA-2008-3103 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Microsoft Internet Explorer CSS Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

Polycom Soundpoint VoIP Phones Default Password (deprecated)

Binary data 4888.prm...

D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite

No description provided by source. D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. html form action="http://10.1.1.166/Forms/cbiSetSWUpdate?16640,0,0,0,0,0,0,0,0"...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 html form action="http://10.1.1.165/callwzd.html" method=post input name=DIRTYPAGE value=3 input name=HELPPAGE value=html.html input...

Zoom VoIP Phone Adapter XSRF Exploit

Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5...

D-Link VoIP Phone Adapter XSRF / XSS

D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be used for csrf bypass:...

D-Link VoIP Phone Adapter - Cross-Site Scripting / Cross-Site Request Forgery Remote Firmware Overwrite

D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be used for csrf bypass:...