4564 matches found
CVE-2005-3715
CVE-2005-3715 affects Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839. The issue stems from the VxWorks debugger UDP port 17185 being left open without authentication, which in turn allows an attacker to access the phone OS, potentially obtain sensitive information, and cause a denial of ser...
CVE-2005-3725
Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause a denial of service or hijack Zyxel phones by attacking or spoofing the hardcoded DNS servers. NOTE: it could be argued that this issue reflects an inherent...
CVE-2005-3722
The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials...
CVE-2005-3720
Hitachi WirelessIP5000 VOIP WiFi Phone 1.5.6 has a vulnerable HTTP server where the default index page exposes sensitive information (e.g., software versions). Connected sources also enumerate additional issues (e.g., unauthorized HTTP server access under factory default config and SNMP/administr...
PT-2005-4471 · Wind River +1 · Vxworks +2
Name of the Vulnerable Software and Affected Versions: UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 Description: The issue concerns hard-coded public credentials in the SNMP daemon that cannot be changed, allowing attackers to obtain sensitive information...
[Full-disclosure] Hitachi IP5000 VoIP Wifi phone multiple vulnerabilities
I disclosed today the following vulnerabilities at the 32nd CSI conference in Washington, D.C. https://www.cmpevents.com/CSI32/a.asp?option=G&V=3&id=406438 Thanks, Shawn Merdinger =============================================================== VENDOR: Hitachi PRODUCT: Hitachi IP5000 VOIP WIFI Pho...
Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone Document ID: 68179 Advisory ID: cisco-sa-20051116-7920 http://www.cisco.com/warp/public/707/cisco-sa-20051116-7920.shtml Revision 1.0 For Public Release...
[Full-disclosure] Zyxel P2000W (Version1) VoIP Wifi phone multiple vulnerabilties
I disclosed today the following vulnerabilities at the 32nd CSI conference in Washington, D.C. https://www.cmpevents.com/CSI32/a.asp?option=G&V=3&id=406438 Thanks, Shawn Merdinger =============================================================== VENDOR: Zyxel PRODUCT: Zyxel P2000W Version 1 VOIP WI...
Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone
...
CVE-2003-1268
Multiple SQL injection vulnerabilities in 1 addcustomer.asp, 2 addprod.asp, and 3 process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters...
vxworks ftpd buffer overflow Denial of Service
It was possible to make the remote host crash by issuing this FTP command : CEL aaaa...aaaa This problem is similar to the 'aix ftpd' overflow but on embedded vxworks based systems like the 3com nbx IP phone call manager and seems to cause the server to crash. OpenVAS Vulnerability Test $Id:...
vxworks ftpd buffer overflow
It might be possible to make the remote FTP server crash by issuing this command : CEL aaaa...aaaa This problem is similar to the 'aix ftpd' overflow but on embedded vxworks based systems like the 3com nbx IP phone call manager and seems to cause the server to crash. Note that OpenVAS solely reli...
vxworks ftpd buffer overflow
It might be possible to make the remote FTP server crash by issuing this command : CEL aaaa...aaaa This problem is similar to the SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2005-3093
Technical details about CVE-2005-3093 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.
Grandstream Budge Tone IP phone DoS
Large datagrame to UDP/5060 port causes device to hang...
Grandstream Budge Tone 101/102 VOIP Phone Denial of Service Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; use Term::ANSIColor; U S A G E system "clear"; print "\nGrandstream BT101/BT102 DoS\n"; print "written by pierre kroma [email protected]\n\n"; if !$ARGV2 print qq Usage: perl grandstream-DoS.pl -s ip-addr udp-port -r/-s ip-addr = ;-...
Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling
source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The issue arises because the affected phones do not verify the 'Call-ID...
nokia-bt-cx.pl.txt
When i was playing with my bluetooth device, i found that if you add in your nickname " 09 0a " in hex, it will cause that every one who search for available bluetooth devices and find your nickname his nokia phone will restart. you should add a nicname like that, something09 0a in hexjust add...
CVE-2002-1934
CVE-2002-1934 affects Pingtel xpressa SIP-based VoIP phones version 1.2.5 through 2.0.1. The vulnerability leaks sensitive information during boot-up, allowing an attacker to obtain the MD5 hashes of the Admin password, the physical password, and other registration data. The available connected s...
