CVE-2008-0531

Cisco Unified IP Phone (7940/7940G/7960/7960G) running SIP firmware is affected by CVE-2008-0531 due to a heap overflow in the handling of SIP challenge/response messages, potentially allowing an attacker-controlled SIP proxy or MITM to trigger arbitrary code execution on a vulnerable device. Thi...

CVE-2008-0528

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data...

CVE-2008-0529

Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command...

CVE-2008-0529

CVE-2008-0529 describes a buffer overflow vulnerability in the telnet server of Cisco Unified IP Phone models (7906G, 7911G, 7941G, 7961G, 7970G, 7971G) running SCCP/SIP firmware. The flaw can allow a remote authenticated attacker to trigger a overflow and execute arbitrary code via a crafted com...

CVE-2008-0527

Cisco Unified IP Phone 7935/7936 (SCCP firmware) HTTP server DoS vulnerability (CVE-2008-0527) allows remote reboot via crafted HTTP requests. Impact: device restarts, potentially service disruption. Root cause: internal HTTP server handling at TCP port 80 leads to denial of service. Affected pro...

CVE-2008-0526

Cisco Unified IP Phone devices running SCCP or SIP firmware (models 7940/7940G/7960/7960G, and related variants) are affected by CVE-2008-0526, a vulnerability that allows remote attackers to reboot the phone via a large ICMP echo (ping) request. The issue is reported in Cisco advisories and vuln...

CVE-2008-0527

The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service reboot via a crafted HTTP request...

CVE-2008-0526

Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service reboot via a long ICMP echo request ping packet...

CVE-2008-0530

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response...

Philips VOIP841 Multiple Vulnerabilities

Secure Network - Security Research Advisory Vuln name: Philips VOIP841 Multiple Vulnerabilities Systems affected: Philips VOIP841, Firmware Version 1.0.4.50 and 1.0.4.80, Web Server Version 1.5 simple httpd Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL:...

Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Code injection

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

CVE-2007-5583

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

CVE-2007-5583

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

CVE-2007-5583

Cisco IP Phone 7940 with firmware P0S3-08-7-00 is affected by CVE-2007-5583, a denial-of-service vulnerability caused by a sequence of SIP INVITE transactions where the Request-URI lacks a user name. Remote attackers can trigger 486 Busy responses or a device reboot. The vulnerability is document...

Cisco Phone 7940 Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student Radu State Ph.D Olivier Festor Ph.D Madynes Team, LORIA - INRIA Lorraine http://madynes.loria.fr use IO::Socket::INET; use String::Random; ...

cisco7940-dos.txt

Cisco 7940 Denial of Service Vulnerability Hardware: Cisco 7940 SIP Phone Severity: High – Denial of Service Software: Affected version: P0S3-08-7-00 Other Versions: May be Notification: Vulnerability found: 30 August 2007 Contact Cisco: 31 August 2007 Tracked issue: 11 September 2007 Vulnerabili...

Cisco Phone 7940 Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================= Cisco Phone 7940 Remote Denial of Service Exploit ================================================= !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student...

Cisco Phone 7940 - Remote Denial of Service

Cisco Phone 7940 - Remote Denial of Service !/usr/bin/perl Vulnerabily discovered using KiF Kiph Authors: Humberto J. Abdelnur Ph.D Student Radu State Ph.D Olivier Festor Ph.D Madynes Team, LORIA - INRIA Lorraine http://madynes.loria.fr use IO::Socket::INET; use String::Random; die "Usage $0 "...

Design/Logic Flaw

The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an...