CVE-2012-0885

chansip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the ressrtp module is used and media support is improperly configured, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted SDP message with a crypto attribu...

CVE-2012-0885

chansip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the ressrtp module is used and media support is improperly configured, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted SDP message with a crypto attribu...

SuSE 10 Security Update : Mozilla NSS (ZYPP Patch Number 7746)

This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read: MFSA 2011-34 - update to 3.12.10 o root CA changes o filter certain bogus certs bmo642815 o fix minor memory leaks o other bugfixes - update to 3.12...

SuSE 11.1 Security Update : libfreebl3 (SAT Patch Number 5138)

This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read : MFSA 2011-34 - update to 3.12.10 - root CA changes - filter certain bogus certs bmo642815 - fix minor memory leaks - other bugfixes - update to...

SuSE 10 Security Update : Mozilla NSS (ZYPP Patch Number 7747)

This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read : - update to 3.12.10 o root CA changes o filter certain bogus certs bmo642815 o fix minor memory leaks o other bugfixes. MFSA 2011-34 - update to...

Cross site scripting

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus SDP before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

CVE-2011-1510

Affected product: ManageEngine ServiceDesk Plus (SDP) 8.0.x, specifically builds up to 8011. Vulnerability: cross-site scripting (XSS) in SolutionSearch.do via the searchText parameter. Root cause: insufficient sanitization of input leading to arbitrary script/HTML execution in the authenticated ...

CVE-2011-3345

CVE-2011-3345 affects the OpenFabrics Enterprise Distribution (OFED) ib_sdp driver (InfiniBand) in the ibsdp module. The root cause is improper handling of certain non-array variables in sdp_proc.c, causing stack memory corruption that can crash the system when a local user reads /proc/net/sdpsta...

Code injection

The SIP process in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.15bsu4 and 8.x before 8.01 does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point MTP, which allows remote...

SIPDroid Agent User Enumeration

=====Tempest Security Intelligence - Advisory 01/2011 ======================================================================================================================== User enumeration in SIPDroid Agent ---------------------------------- Author: Anibal Vaz Marques de Aguiar =====Table of...

SDP Downloader HTTP Header Handling Buffer Overflow Vulnerability

This host is installed with SDP Downloader and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsdpdownloaderhttpheaderbofvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ SDP Downloader HTTP Header Handling Buffer Overflow Vulnerability Authors: Sooraj KS Copyright:...

SDP Downloader HTTP Header Handling Buffer Overflow Vulnerability

SDP Downloader is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SDP Downloader Buffer Overflow

!/usr/bin/python Bug : SDP Downloader httpresponse Remote Buffer Overflow Exploit by: sup3r Tested on : Xp sp3 http://sdp.ppona.com/ from socket import win32exec - EXITFUNC=process CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com shellcode=...

SDP Downloader 2.3.0 - http_response Remote Buffer Overflow

SDP Downloader 2.3.0 - httpresponse Remote Buffer Overflow !/usr/bin/python Bug : SDP Downloader httpresponse Remote Buffer Overflow Exploit by: sup3r Tested on : Xp sp3 http://sdp.ppona.com/ from socket import win32exec - EXITFUNC=process CMD=calc Size=160 Encoder=PexFnstenvSub...

SDP Downloader 2.3.0 (http_response) Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Bug : SDP Downloader httpresponse Remote Buffer Overflow Exploit by: sup3r Tested on : Xp sp3 http://sdp.ppona.com/ from socket import win32exec - EXITFUNC=process CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.c...

SDP Downloader 2.3.0 - 'http_response' Remote Buffer Overflow

!/usr/bin/python Bug : SDP Downloader httpresponse Remote Buffer Overflow Exploit by: sup3r Tested on : Xp sp3 http://sdp.ppona.com/ from socket import win32exec - EXITFUNC=process CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com shellcode=...

Fedora 12 : asterisk-1.6.1.17-1.fc12 (2010-3381)

Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...

Digium Asterisk Invalid RTP Payload Type Number Memory Corruption (CVE-2008-1289)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...