13 matches found
EUVD-2007-1687
Malware in sbrugna...
EUVD-2009-3677
Malware in sbrugna...
Cross site request forgery (csrf)
ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service crash via a SIP INVITE request with an empty Call-Info header...
CVE-2009-3704: Undefined Security Weakness
ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service crash via a SIP INVITE request with an empty Call-Info header...
ZoIPer Call-Info Denial Of Service
!/usr/bin/python ZoIPer v2.22 Call-Info Remote Denial Of Service. Remote Crash P.O.C. Author: Tomer Bitton Gr33nG0bL1n Tested on Windows XP SP2 , SP3 , Ubuntu 8.10 Vendor Notified on: 21/09/2009 Vendor Fix: Fixed in version 2.24 Library 5324 Bad Chars: \x20 , \x09 import sys import socket import ...
ZoIPer Call-Info DoS
Exploit for unknown platform in category remote exploits ==================== ZoIPer Call-Info DoS ==================== Title: ZoIPer Call-Info DoS CVE-ID: OSVDB-ID: Author: Tomer Bitton Published: 2009-10-14 Verified: yes view source print? !/usr/bin/python ZoIPer v2.22 Call-Info Remote Denial O...
ZoIPer Call-Info DoS
No description provided by source. !/usr/bin/python ZoIPer v2.22 Call-Info Remote Denial Of Service. Remote Crash P.O.C. Author: Tomer Bitton Gr33nG0bL1n Tested on Windows XP SP2 , SP3 , Ubuntu 8.10 Vendor Notified on: 21/09/2009 Vendor Fix: Fixed in version 2.24 Library 5324 Bad Chars: \x20 , \x...
ZoIPer 2.22 - Call-Info Remote Denial of Service
ZoIPer 2.22 - Call-Info Remote Denial of Service !/usr/bin/python ZoIPer v2.22 Call-Info Remote Denial Of Service. Remote Crash P.O.C. Author: Tomer Bitton Gr33nG0bL1n Tested on Windows XP SP2 , SP3 , Ubuntu 8.10 Vendor Notified on: 21/09/2009 Vendor Fix: Fixed in version 2.24 Library 5324 Bad...
ZoIPer 2.22 - Call-Info Remote Denial of Service
!/usr/bin/python ZoIPer v2.22 Call-Info Remote Denial Of Service. Remote Crash P.O.C. Author: Tomer Bitton Gr33nG0bL1n Tested on Windows XP SP2 , SP3 , Ubuntu 8.10 Vendor Notified on: 21/09/2009 Vendor Fix: Fixed in version 2.24 Library 5324 Bad Chars: \x20 , \x09 import sys import socket import ...
Code injection
The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...
CVE-2007-1693
The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...
CVE-2007-1693: Improper Input Validation
The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...
