Design/Logic Flaw

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3801

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3801

CVE-2008-3801 affects Cisco IOS 12.2–12.4 and Cisco Unified Communications Manager (CUCM) 4.1–6.1 when VoIP is enabled. Affected SIP processing of valid SIP messages can cause the CCM/IOS DPS to reload, resulting in DoS (service disruption). Cisco advisories list fixed releases: CUCM 4.1(3)SR8, 4...

CVE-2008-3801: Undefined Security Weakness

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3800: Undefined Security Weakness

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

Cisco Unified Communications Manager SIP服务拒绝服务漏洞

BUGTRAQ ID: 31367 CVE ID: CVE-2008-3800 CVE-2008-3801 CNCVE ID：CNCVE-20083800 CNCVE-20083801 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications Manager SIP服务处理存在两个拒绝服务攻击，远程攻击者可以利用漏洞使语音服务破坏。 Cisco Unified Communications Manager的SIP实现在处理特定的合法的SIP消息时可触发Cisco...

Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

ezbounce Detection

ezbounce, an IRC bouncer, is running on this port. It proxies communications between IRC clients and servers. This may be done to allow clients without direct network access to connect to servers or to hide client addresses. Legimate use of such proxies is rare. They are often installed by...

Atheros Communications AR5416-AC1E信息元素拒绝服务漏洞

BUGTRAQ ID: 31012 CVE ID：CVE-2007-5474 CNCVE ID：CNCVE-20075474 Atheros Communications AR5416-AC1E是一款无线WI-FI访问接入点。 Atheros Communications AR5416-AC1E不正确解析包含在关联请求中的Atheros供应商特殊信息元素，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 通过发送恶意的关联请求，如果请求中的信息元素包含超长长度的Atheros信息元素，在成功进行802.11之后，可触发此漏洞。 成功利用此漏洞可导致设备重新启动或挂起。 Linksys...

Security Best Practice: Protect Yourself from VoIP Denial of Service Vulnerabilities

VoIP opens voice communications to the same kinds of security threats that imperil data communications. Attacks on data communications can come through the IP voice infrastructure and vice versa. Denial of service attacks targeting weak VoIP elements could flood the network with voice traffic,...

JVN#33706820 Multiple Panasonic Communications Co., Ltd. network cameras vulnerable to cross-site scripting

Panasonic Communications Co., Ltd. network camera BL-C111/131 and BB-HCM511/531/580/581/527/515 error pages contain a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Apply the latest updates provided by the...

DEBIAN-CVE-2008-3137

The GSM SMS dissector in Wireshark formerly Ethereal 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service application crash via unknown vectors...

Cisco Unified Communications Manager RIS数据收集器服务绕过认证漏洞

BUGTRAQ ID: 29935 CVECAN ID: CVE-2008-2062,CVE-2008-2730 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM的实时信息服务器（RIS）数据收集器服务存在绕过认证漏洞，可能导致非授权泄露某些CUCM集群信息。...

Cisco Unified Communications Manager CTI服务拒绝服务漏洞

BUGTRAQ ID: 29933 CVECAN ID: CVE-2008-2061 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM的计算机电话集成（CTI）管理器服务在处理畸形输入时存在拒绝服务漏洞，远程攻击者可以通过向默认的TCP 2748监听端口发送恶意报文导致语音服务中断。 Cisco Unified Communications Manager 6.x Cisco Unified Communications Manager 5.x 临时解决方法：...

Authentication flaw

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

Authentication flaw

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

Design/Logic Flaw

The Computer Telephony Integration CTI Manager service in Cisco Unified Communications Manager CUCM 5.x before 5.13c and 6.x before 6.12 allows remote attackers to cause a denial of service TSP crash via malformed network traffic to TCP port 2748...

CVE-2008-2061

The Computer Telephony Integration CTI Manager service in Cisco Unified Communications Manager CUCM 5.x before 5.13c and 6.x before 6.12 allows remote attackers to cause a denial of service TSP crash via malformed network traffic to TCP port 2748...

CVE-2008-2730

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

CVE-2008-2062

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...