ezbounce Detection

ezbounce, an IRC bouncer, is running on this port. It proxies communications between IRC clients and servers. This may be done to allow clients without direct network access to connect to servers or to hide client addresses. Legimate use of such proxies is rare. They are often installed by...

Atheros Communications AR5416-AC1E信息元素拒绝服务漏洞

BUGTRAQ ID: 31012 CVE ID：CVE-2007-5474 CNCVE ID：CNCVE-20075474 Atheros Communications AR5416-AC1E是一款无线WI-FI访问接入点。 Atheros Communications AR5416-AC1E不正确解析包含在关联请求中的Atheros供应商特殊信息元素，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 通过发送恶意的关联请求，如果请求中的信息元素包含超长长度的Atheros信息元素，在成功进行802.11之后，可触发此漏洞。 成功利用此漏洞可导致设备重新启动或挂起。 Linksys...

Security Best Practice: Protect Yourself from VoIP Denial of Service Vulnerabilities

VoIP opens voice communications to the same kinds of security threats that imperil data communications. Attacks on data communications can come through the IP voice infrastructure and vice versa. Denial of service attacks targeting weak VoIP elements could flood the network with voice traffic,...

JVN#33706820 Multiple Panasonic Communications Co., Ltd. network cameras vulnerable to cross-site scripting

Panasonic Communications Co., Ltd. network camera BL-C111/131 and BB-HCM511/531/580/581/527/515 error pages contain a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Apply the latest updates provided by the...

DEBIAN-CVE-2008-3137

The GSM SMS dissector in Wireshark formerly Ethereal 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service application crash via unknown vectors...

Cisco Unified Communications Manager CTI服务拒绝服务漏洞

BUGTRAQ ID: 29933 CVECAN ID: CVE-2008-2061 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM的计算机电话集成（CTI）管理器服务在处理畸形输入时存在拒绝服务漏洞，远程攻击者可以通过向默认的TCP 2748监听端口发送恶意报文导致语音服务中断。 Cisco Unified Communications Manager 6.x Cisco Unified Communications Manager 5.x 临时解决方法：...

Cisco Unified Communications Manager RIS数据收集器服务绕过认证漏洞

BUGTRAQ ID: 29935 CVECAN ID: CVE-2008-2062,CVE-2008-2730 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM的实时信息服务器（RIS）数据收集器服务存在绕过认证漏洞，可能导致非授权泄露某些CUCM集群信息。...

Authentication flaw

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

CVE-2008-2061

The Computer Telephony Integration CTI Manager service in Cisco Unified Communications Manager CUCM 5.x before 5.13c and 6.x before 6.12 allows remote attackers to cause a denial of service TSP crash via malformed network traffic to TCP port 2748...

Design/Logic Flaw

The Computer Telephony Integration CTI Manager service in Cisco Unified Communications Manager CUCM 5.x before 5.13c and 6.x before 6.12 allows remote attackers to cause a denial of service TSP crash via malformed network traffic to TCP port 2748...

Authentication flaw

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

CVE-2008-2730

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

CVE-2008-2062

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

CVE-2008-2062

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

CVE-2008-2730

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

CVE-2008-2062

CVE-2008-2062 (CISCO CUCM RIS Data Collector) affects the Real-Time Information Server Data Collector component in Cisco Unified Communications Manager (CUCM) prior to 4.2(3)SR4 and 4.3 prior to 4.3(2)SR1. The issue is an authentication bypass: by connecting directly to the RIS Data Collector por...

CVE-2008-2061

The Computer Telephony Integration CTI Manager service in Cisco Unified Communications Manager CUCM 5.x before 5.13c and 6.x before 6.12 allows remote attackers to cause a denial of service TSP crash via malformed network traffic to TCP port 2748...

Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Unified Communications Manager multiple security vulnerabilities

Computer Telephony Integration Manager DoS TCP/2748 The Real-Time Information Server SOAP interface TCP/2556 unauthorized access...

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities Advisory ID: cisco-sa-20080625-cucm Revision 1.0 For Public Release 2008 June 25 1600 UTC GMT...