4579 matches found
Code injection
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandberg device, aka Bug ID CSCtq73319...
CVE-2012-0330
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service device crash via a malformed SIP message, aka Bug ID CSCtr20426...
CVE-2012-0331
CVE-2012-0331 affects Cisco TelePresence Video Communication Server (all three variants: Control, Expressway, Starter Pack Express) prior to X7.0.1. A crafted SIP packet (e.g., SIP INVITE from a Tandberg device) could crash the affected device, causing a denial-of-service condition. The vulnerabi...
CVE-2012-0331
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service device crash via a crafted SIP packet, as demonstrated by a SIP INVITE message from a Tandberg device, aka Bug ID CSCtq73319...
FreeBSD Ports: asterisk18
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: asterisk18
The remote host is missing an update to the system as announced in the referenced advisory. VID bb389137-21fb-11e1-89b4-001ec9578670 OpenVAS Vulnerability Test $ Description: Auto generated from VID bb389137-21fb-11e1-89b4-001ec9578670 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian Security Advisory DSA 2367-1 (asterisk)
The remote host is missing an update to asterisk announced via advisory DSA 2367-1. OpenVAS Vulnerability Test $Id: deb23671.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2367-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
CVE-2012-1008
OfficeSIP Server 3.1 allows remote attackers to cause a denial of service daemon crash via a crafted To header in a SIP INVITE message...
Code injection
OfficeSIP Server 3.1 allows remote attackers to cause a denial of service daemon crash via a crafted To header in a SIP INVITE message...
CVE-2012-1008
CVE-2012-1008 affects OfficeSIP Server 3.1. A remote attacker can trigger a denial-of-service (daemon crash) by sending a SIP INVITE with a crafted To header. The available documents confirm the affected product and the impact but do not provide additional details on root cause, exact vulnerable ...
OfficeSIP Server 3.1 - Denial of Service
OfficeSIP Server 3.1 - Denial of Service Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461...
OfficeSIP Server 3.1 - Denial of Service
Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461 http://secpod.org/advisories/SecPodExploitOfficeSIPServerDOSVuln.txt...
OfficeSIP Server 3.1 Denial Of Service Vulnerability
Exploit for windows platform in category dos / poc Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461...
SIP Server Detection
Binary data 6291.prm...
dns-srv-enum NSE Script
Enumerates various common service SRV records for a given domain name. The service records contain the hostname, port and priority of servers for a given service. The following services are enumerated by the script: - Active Directory Global Catalog - Exchange Autodiscovery - Kerberos KDC...
Digium Asterisk SIP Channel Driver Denial Of Service (CVE-2011-4063)
A denial of service vulnerability has been reported in Digium Asterisk. The vulnerability is due to an error in Asterisk's SIP channel driver while handling malformed REGISTER requests. A remote attacker may exploit this vulnerability by sending a specially crafted REGISTER request to an affected...
Debian DSA-2367-1 : asterisk - several vulnerabilities
Several vulnerabilities have been discovered in Asterisk, an Open Source PBX and telephony toolkit : - CVE-2011-4597 Ben Williams discovered that it was possible to enumerate SIP user names in some configurations. Please see the upstream advisory for details. This update only modifies the sample...
Cisco IOS Software Network Address Translation Vulnerabilities (cisco-sa-20100922-nat)
The Cisco IOS Software Network Address Translation functionality contains three denial of service DoS vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol SIP packets, the second vulnerability in the translation of H.323 packets and the third vulnerability...
Exploit for Asterisk Security Advisory AST-2011-013
A Metasploit module is attached that demonstrates how to enumerate Asterisk sip peers that have a nat setting different to the global sip nat setting as described in Asterisk Security Advisory AST-2011-013. The example below finds all peers with nat=yes, but the metasploit module will also work...