CVE-2008-4444

CVE-2008-4444 — Cisco SIP phones RTP header parsing DoS/risk of code execution Affected hardware/software: Cisco Unified IP Phone models 7960G and 7940G with firmware P0S3-08-9-00 and possibly earlier versions up to 8.10. Vulnerability: Improper parsing of certain RTP headers can be exploited by ...

CVE-2008-4444

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

Cisco SIP VoIP phones DoS

Crash on malformed RTP header parsing...

Cisco Unified IP Phone 7960G and 7940G (SIP) RTP Header Vulnerability

Title: ------ Cisco Unified IP Phone 7960G and 7940G SIP RTP Header Vulnerability Summary: -------- The Cisco Unified IP Phone 7960G and 7940G SIP do not correctly parse some malformed RTP headers leading to a deterministic denial of service Assigned CVE: ------------- CVE-2008-4444 Details:...

CVE-2008-4444: Improper Input Validation

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

Cisco Unified IP Phone 7960G and 7940G RTP远程拒绝服务漏洞

BUGTRAQ ID: 33264 CVE ID：CVE-2008-4444 CNCVE ID：CNCVE-20084444 Cisco Unified IP Phone是思科的统一IP电话解决方案。 Cisco Unified IP Phone 7960G和7940G不正确解析部分畸形RTP头字段数据，远程攻击者可以利用漏洞对电话机进行拒绝服务攻击。 SIP协议用于在电话中设置呼叫，一旦呼叫建立，媒体内容由RTP协议承接，远程攻击者可以发送特殊构建的RTP报文时电话重启。 Cisco Unified IP Phone 7960G Cisco Unified IP Phone 7940G...

FreeBSD Ports: ethereal, ethereal-lite, tethereal, tethereal-lite

The remote host is missing an update to the system as announced in the referenced advisory. VID efa1344b-5477-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

AOL AIM SIPFoundry sipXtapi RTP Processing Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of any communication application utilizing the SIP Foundry API. This includes vendors such as AOL, Yahoo, Skype, Oracle, Nortel and more. Authentication is not required to exploit these vulnerabilitie...

Update Protection against Asterisk Buffer Overflow Vulnerabilities

Two buffer overflow vulnerabilities have been reported in the RTP payload handling code of Asterisk that could allow remote attackers to execute arbitrary code...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

Buffer overflow

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

Asterisk multiple security vulnerabilities

Multiple format string vulnerabilities, buffer overflow on RTP handling, HTTP interface sessions spoofing, unauthorized SIP calls...

Asterisk RTP Codec负载处理多个溢出漏洞

BUGTRAQ ID: 28308 CVECAN ID: CVE-2008-1289 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk在处理带有畸形数据的请求时存在漏洞，如果在INVITE消息的SDP负载中发送了无效的RTP负载类型号的话，就会导致写入无效的内存位置，允许攻击者控制某些部分的内存。 无效的内存写入发生在processline（channels/chansip.c文件5275行）所调用的...

[Full-disclosure] [MU-200803-01] Multiple buffer overflows in Asterisk

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple buffer overflows in Asterisk MU-200803-01 March 18, 2008 http://labs.musecurity.com/advisories.html Affected Products/Versions: Asterisk 1.4.18 and other branches http://www.asterisk.org/node/48466 Product Overview: Asterisk is an open source...

AST-2008-002: Two buffer overflows in RTP Codec Payload Handling

Asterisk Project Security Advisory - AST-2008-002 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Two buffer overflows in RTP Codec Payload | | | Handling |...

Asterisk 1.4.x - RTP Codec Payload Handling Multiple Buffer Overflow Vulnerabilities

Asterisk 1.4.x - RTP Codec Payload Handling Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/28308/info Asterisk is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data before copying it to...