PT-2009-4507 · Cisco · Cisco Unified Communications Manager

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions 4.x through 7.1 before 7.12asu1, specifically: Cisco Unified Communications Manager versions 4.x Cisco Unified Communications Manager versions 5.x before 5.13g Cisco Unified Communications Manager...

Cisco Unified Communications Manager Denial of Service Vulnerabilities

Cisco Unified Communications Manager formerly CallManager contains multiple denial of service DoS vulnerabilities that if exploited could cause an interruption to voice services. The Session Initiation Protocol SIP and Skinny Client Control Protocol SCCP services are affected by these...

USN-818-1: curl vulnerability

Scott Cantor discovered that Curl did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

Ubuntu USN-810-2 (fixed)

The remote host is missing an update to fixed announced via advisory USN-810-2. Original advisory details: Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : fetchmail vulnerability (USN-816-1)

Matthias Andree discovered that fetchmail did not properly handle certificates with NULL characters in the certificate name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Securi...

USN-816-1: fetchmail vulnerability

Matthias Andree discovered that fetchmail did not properly handle certificates with NULL characters in the certificate name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

USN-810-1: NSS vulnerabilities

Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service via application crash or execute arbitrary code as the user invoking the program. CVE-2009-2404 Moxie...

Bopup Communication Server Remote Buffer Overflow Vulnerability

This host has Bopup Communication Server installed and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodbopupserverbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Bopup Communication Server Remote Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright:...

Court Rules in Favor of Kaspersky in Filtering Case

From Wired David Kravets A federal appeals court, in the first decision of its kind, said Thursday that companies providing malware, spyware and adware blocking services are immunized by the Communications Decency Act of 1996 from lawsuits claiming unfair business practices. A three-judge panel o...

Bopup Communications Server (3.2.26.5460) Remote BOF Exploit (SEH)

No description provided by source. !/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : Bopup Communications Server 3.2.26.5460 Remote BOF Exploit SEH Tested on : Xp sp3 ENVB Refer : mu-b Exploited by : His0k4 Greetings : All...

Bopup Communications Server Buffer Overflow

!/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | -" %sys.argv0 sys.exit0 win32adduser - PASS=27 EXITFUNC=seh USER=dz Size=228 Encoder=PexFnstenvSub http://metasploit.com shellcode= "\x44\x7A\x32\x37\x44\x7A\x32\x37\x29\xc9\x83\xe9\xcd\xd9\xee\xd9"...

Bopup Communications Server (3.2.26.5460) Remote BOF Exploit (SEH)

Exploit for windows platform in category remote exploits ================================================================== Bopup Communications Server 3.2.26.5460 Remote BOF Exploit SEH ================================================================== !/usr/bin/python Usage : python bopup.py...

Bopup Communications Server 3.2.26.5460 - Remote Buffer Overflow (SEH)

Bopup Communications Server 3.2.26.5460 - Remote Buffer Overflow SEH !/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | -" %sys.argv0 sys.exit0 win32adduser - PASS=27 EXITFUNC=seh USER=dz Size=228 Encoder=PexFnstenvSub http://metasploit.com shellcode=...

Bopup Communications Server 3.2.26.5460 - Remote Buffer Overflow (SEH)

!/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | -" %sys.argv0 sys.exit0 win32adduser - PASS=27 EXITFUNC=seh USER=dz Size=228 Encoder=PexFnstenvSub http://metasploit.com shellcode= "\x44\x7A\x32\x37\x44\x7A\x32\x37\x29\xc9\x83\xe9\xcd\xd9\xee\xd9"...

Bopup Communications Server Buffer Overflow

This module exploits a stack buffer overflow in Bopup Communications Server 3.2.26.5460. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Bopup Communications Server 3.2.26.5460 - Remote SYSTEM

/ bopup-down.c Copyright c 2008 by Bopup Communications Server remote SYSTEM exploit by mu-b - Sat Feb 08 2008 - Tested on: Bopup Communications Server 3.2.26.5460 Mar 18 2009 .text:00407A17 lea eax, ebp+pkt0x19 .text:00407A1D push eax .text:00407A1E lea eax, ebp+var354 .text:00407A24 push eax...

Bopup Communications Server 3.2.26.5460 Remote SYSTEM Exploit

Exploit for windows platform in category remote exploits ============================================================= Bopup Communications Server 3.2.26.5460 Remote SYSTEM Exploit ============================================================= / bopup-down.c Copyright c 2008 Bopup Communications...

[SECURITY] Fedora 11 Update: openssl-0.9.8k-5.fc11

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

[SECURITY] Fedora 10 Update: openssl-0.9.8g-14.fc10

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...