169 matches found
Session fixation
The Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session...
CVE-2007-5792
The CVE-2007-5792 entry concerns the Vonage Motorola Phone Adapter VT 2142-VD, where RTP packets are not encrypted. This allows remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session. CVSSv2 base score: 7.1 (HIGH); vector: AV:N/AC:M/Au:N/C:C/I:N/A:N. No explicit ...
Nortel IP Phone Surveillance Mode
COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Phone Vendor: Nortel Subject: IP Phone Surveillance Mode Risk: High Effect: Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: October, 18th 2007 Introduction: ------------- An IP phone can be put into...
Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities
Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to ope...
Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities
source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone. This will allow attackers to...
Code injection
The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service blocked call reception via a certain SIP INVITE message followed by a...
CVE-2007-4498
The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service blocked call reception via a certain SIP INVITE message followed by a...
EMC Legato NetWorker portmapper allows remote calls to "pmap_set" and "pmap_unset"
Overview The EMC Legato NetWorker PortMapper allows remote access to pmapset and pmapunset. This could allow a remote attacker to cause a denial of service or potentially to eavesdrop on communications between NetWorker programs. Description EMC Legato NetWorker is a cross-platform backup and...