Polycom IP Phone - Web Interface Data Disclosure

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , 'Line 1' of 'Polycom IP Phone' software. The vulnerability allows the attacker to disclosure the password of the username for the ph...

Aastra IP Phone 9480i - Web Interface Data Disclosure

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] ----------------------------------- Aastra IP Phone is vulnerable for a...

DEBIAN-CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216

The CVE affects Asterisk Open Source 1.8.x (before 1.8.4.2). In the SIP channel driver, reqresp_parser.c fails to initialize certain strings, allowing a remote attacker to trigger a NULL pointer dereference via a malformed Contact header, causing a denial of service (daemon crash). Remediation: u...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

CVE-2011-2216

reqrespparser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed Contact header...

Asterisk SIP Channel Driver Denial of Service (AST-2011-007)

According to the version in its SIP banner, the version of Asterisk running on the remote host is 1.8.x prior to 1.8.4.2. It, therefore, could be affected by a denial of service vulnerability. If a remote attacker initiates a SIP call and the recipient picks up, the remote user can reply with a...

Asterisk SIP Channel Driver Denial of Service (AST-2011-007)

Binary data 5939.prm...

Asterisk DoS

Crash on processing SIP response headers...

AST-2011-007

Asterisk Project Security Advisory - AST-2011-007 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...

asterisk -- Remote crash vulnerability

The Asterisk Development Team reports: If a remote user initiates a SIP call and the recipient picks up, the remote user can reply with a malformed Contact header that Asterisk will improperly handle and cause a crash due to a segmentation fault...

Wireshark 1.4.7 & Wireshark 1.2.17 Released

Wireshark 1.4.7 & Wireshark 1.2.17 Released Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education.This update fixes many bugs. Supports for the following protocols have been updated – BSSMAP, DMP, GSM SMS, LDSS, NCP,...

Asterisk 1.8.4.1 - SIP REGISTER Request User Enumeration

Asterisk 1.8.4.1 - SIP REGISTER Request User Enumeration source: https://www.securityfocus.com/bid/48008/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisk 1.8.4.1...

Asterisk 1.8.4 SIP Username Enumeration

Asterisk, sip response permit username identification through use REGISTER Author: francesco.tornieri "At" verona-wireless.net Summary: Sip responses permit user identification Release Date: 25/05/2011 Criticality level: Low Impact: Information leak Software: Asterisk 1.8.4 I try it to an...

Cisco Security Advisory: Cisco XR 12000 Series Shared Port Adapters Interface Processor Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco XR 12000 Series Shared Port Adapters Interface Processor Vulnerability Advisory ID: cisco-sa-20110525-iosxrspa Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...

Asterisk 1.8.4.1 - SIP 'REGISTER' Request User Enumeration

source: https://www.securityfocus.com/bid/48008/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisk 1.8.4.1; other versions may also be affected. REGISTER...

sip-brute NSE Script

Performs brute force password auditing against Session Initiation Protocol SIP accounts. This protocol is most commonly associated with VoIP sessions. Script Arguments sip.timeout See the documentation for the sip library. creds.service, creds.global See the documentation for the creds library...

sip-enum-users NSE Script

Enumerates a SIP server's valid extensions users. The script works by sending REGISTER SIP requests to the server with the specified extension and checking for the response status code in order to know if an extension is valid. If a response status code is 401 or 407, it means that the extension ...