Malicious code in express-router-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49091d8e8923e3e709cebd14f01ee1617267bf3f9b6be99052603715b7cf9f70 The sole shipped file index.js is a heavily obfuscated RC4 + base64 string-array, 337-entry rotated array, control-flow flattening IIFE that executes...

DEBIAN-CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

CVE-2020-28361

Kamailio (used in SER/Sippy Softswitch) up to version before 5.4.0 is affected by a header-smuggling bypass in the remove_hf function of the Kamailio textops module. The vulnerability can be exploited by a skilled attacker with valid credentials to bypass header-removal protections and disrupt in...

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

CVE-2020-28361

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

SIP Express Router Missing To in ACK DoS

The remote host is a SIP Express Router SER. The SER product has been found to contain a vulnerability where ACKs requests without a To header, when SER has been enabled to use the SL module, can be used to crash the product. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might ...

SIP Express Router Register Buffer Overflow

The remote host is running a SIP Express Router. A bug has been found in the remote device which may allow an attacker to crash this device by sending a too long contact list in REGISTERs. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced source...

CVE-2003-1113

The Session Initiation Protocol SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...

CVE-2003-1113

The SIP vulnerability CVE-2003-1113 affects IPTel SIP Express Router (SER) 0.8.9 and earlier. Remote attackers can craft INVITE messages to trigger a denial of service and possibly execute arbitrary code, as demonstrated by the OUSPG PROTOS c07-sip test suite. The provided documents do not includ...

CVE-2003-1113

The Session Initiation Protocol SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...