WengoPhone 2.x - SIP Phone Remote Denial of Service

WengoPhone 2.x - SIP Phone Remote Denial of Service /main.cpp/ include include using namespace std; ifdef WIN32 include pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0 define...

CounterPath X-Lite 3.x - SIP phone Remote Denial of Service

/main.cpp/ include include using namespace std; ifdef WIN32 include pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0 define readfroma,b,c,d,e recvfroma, b, c, 0, d, e else includ...

JVN#43615794 Yayoi Kaikei improper handling of credential information

Yayoi Kaikei Quick Navigator makes the user log into the vendor's server, and sends the user credentials unencrypted. Impact By monitoring the communication between Quick Navigator and the vendor's server, an attacker can obtain the customer number and the phone number to impersonate the user on...

Code injection

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to place calls to arbitrary phone numbers via certain requests to the web server on port 1800...

CVE-2007-3440

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to place calls to arbitrary phone numbers via certain requests to the web server on port 1800...

CVE-2007-3441

Format string vulnerability in the Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to cause a denial of service blocked call reception and slow calling via format string specifiers in an SDP header value, a different vulnerability than CVE-2007-33...

Design/Logic Flaw

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800...

CVE-2007-3438

Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361...

CVE-2007-3439

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800...

Format string

Format string vulnerability in the Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to cause a denial of service blocked call reception and slow calling via format string specifiers in an SDP header value, a different vulnerability than CVE-2007-33...

CVE-2007-3440

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to place calls to arbitrary phone numbers via certain requests to the web server on port 1800...

CVE-2007-3438

CVE-2007-3438 : Buffer overflow in the SIP header parsing module of the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015]. This vulnerability allows remote attackers to execute arbitrary code via a malformed SIP message. It is described as a separate issue from CVE-2007-3361. No remediation d...

CVE-2007-3441

Format string vulnerability in the Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to cause a denial of service blocked call reception and slow calling via format string specifiers in an SDP header value, a different vulnerability than CVE-2007-33...

CVE-2007-3440

The CVE-2007-3440 entry concerns the Snom 320 SIP Phone. A flaw in the web server on port 1800 permits remote attackers to cause the device to place calls to arbitrary numbers via specific requests. Affected: Snom 320 devices running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36. R...

CVE-2007-3441

CVE-2007-3441 affects the Aastra 9112i SIP Phone (firmware 1.4.0.1048, boot 1.1.0.10). The vulnerability is a format string flaw in an SDP header value that remote attackers can exploit to cause a denial of service (blocked call reception and slow calling). This entry is distinct from CVE-2007-33...

CVE-2007-3439

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800...

CVE-2007-3439

The CVE concerns the Snom 320 SIP Phone (snom320 linux 3.25, snom320-SIP 6.2.3, snom320 jffs23.36). The vulnerability allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800. The root cause and exact exploitati...

BlackBerry 7270 Phone SIP堆栈格式串漏洞

BlackBerry 7270 Phone是一款IP电话解决方案。 BlackBerry 7270 Phone处理INVITE消息存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于存在格式串问题，提交包含恶意数据的SIP INVITE消息，可导致程序不能使用，必须重新启动获得正常功能。当漏洞被利用时，设备生成如下错误： "Uncaught exception: java.lang.IllegalArgumentException" BlackBerry Device Software 4.0.1 .83 BlackBerry 7270 0 可联系供应商获得补丁信息：...

Design/Logic Flaw

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

CVE-2007-3349

The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to 1 cause a denial of service device freeze via a malformed SIP message of a certain length or 2 cause a denial of service continuous ring via a malformed SIP message of a certain other length...