1476 matches found
CVE-2007-3350
AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application hang via a flood of spoofed SIP INVITE requests...
CVE-2007-3348
The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service device outage via a malformed SDP header in a SIP INVITE message...
CVE-2007-3348
The CVE-2007-3348 entry concerns D-Link DPH-540/DPH-541 phones. Affected component: the SIP handling code where a malformed SDP header in a SIP INVITE can be used by remote attackers to trigger a device denial of service. This is described in NVD/CVE records with a CVSS v2 base score of 7.8 (HIGH...
CVE-2007-3351: Undefined Security Weakness
The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...
CVE-2007-3347: Undefined Security Weakness
The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID...
CVE-2007-3369: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service device hang or reboot via an INVITE message with a long Via header...
CVE-2007-3348: Undefined Security Weakness
The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service device outage via a malformed SDP header in a SIP INVITE message...
CVE-2007-3350: Undefined Security Weakness
AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application hang via a flood of spoofed SIP INVITE requests...
CVE-2007-3320
The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact...
CVE-2007-3320: Undefined Security Weakness
The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact...
AOL Instant Messenger <= 6.1.32.1 SIP INVITE Message DoS
Binary data 4103.prm...
SJPhone SIP Client INVITE Transaction Remote DoS
Binary data 4105.prm...
Stack overflow
Multiple stack-based buffer overflows in the processsdp function in chansip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long 1 T38FaxRateManagement or 2 T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP...
CVE-2007-2293
Multiple stack-based buffer overflows in the processsdp function in chansip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long 1 T38FaxRateManagement or 2 T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP...
Cross site request forgery (csrf)
The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service device reboot via a 0377 0xff character in the From header, and possibly certain other locations, in a SIP INVITE request...
CVE-2007-2270
The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service device reboot via a 0377 0xff character in the From header, and possibly certain other locations, in a SIP INVITE request...
CVE-2007-2270
CVE-2007-2270 affects the Linksys SPA941 VoIP Phone. The vulnerability is triggered by a 0xff character in the SIP INVITE From header (and possibly other locations), leading to a denial of service via device reboot. The available documents provide the impact and affected component but do not spec...
CVE-2007-2270: Undefined Security Weakness
The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service device reboot via a 0377 0xff character in the From header, and possibly certain other locations, in a SIP INVITE request...
Asterisk: Two SIP Denial of Service vulnerabilities
Background Asterisk is an open source implementation of a telephone private branch exchange PBX. Description The Madynes research team at INRIA has discovered that Asterisk contains a null pointer dereferencing error in the SIP channel when handling INVITE messages. Furthermore qwerty1979...
Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...