4579 matches found
openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0385-1)
This update fixes the following security issue : A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by...
SIPDroid Agent User Enumeration
=====Tempest Security Intelligence - Advisory 01/2011 ======================================================================================================================== User enumeration in SIPDroid Agent ---------------------------------- Author: Anibal Vaz Marques de Aguiar =====Table of...
sipdroid 2.2 - SIP INVITE Response User Enumeration
source: https://www.securityfocus.com/bid/47710/info sipdroid is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. sipdroid 1.6.1, 2.0.1, and 2.2 running on Android 2.1 are vulnerable; other versions may als...
CVE-2011-1605
Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu2, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCth39586...
CVE-2011-1606
Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...
CVE-2011-1604
Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...
Code injection
Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu2, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCth39586...
CVE-2011-1606
Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...
Memory corruption
Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...
Code injection
Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...
CVE-2011-1605
CVE-2011-1605 affects Cisco Unified Communications Manager (CUCM) 6.x, 7.x, and 8.x. The vulnerability arises from processing malformed SIP messages in the SIP services, leading to a denial of service (process failure). Cisco’s advisory lists fixes in CUCM versions 6.1(5)SU2/3, 7.1(5b)SU2, 8.0(3)...
CVE-2011-1605
Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu2, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCth39586...
CVE-2011-1604
Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...
CVE-2011-1606
Cisco Unified Communications Manager (CUCM) 6.x–8.x is affected by CVE-2011-1606, a DoS in SIP processing triggered by malformed SIP messages. According to Cisco’s advisory, the vulnerability is fixed in CUCM releases 6.1(5)su3, 7.1(5b)su4, 8.0(3a)su2, and 8.5(1)su1. The issue can cause a process...
CVE-2011-1604
The CVE-2011-1604 issue affects Cisco Unified Communications Manager (CUCM) 6.x, 7.x, 8.0, and 8.5, where a memory leak triggered by malformed SIP messages can cause DoS (memory consumption and process failure). Cisco’s advisory fixes this in CUCM versions 6.1(5)SU3, 7.1(5b)SU3, 8.0(3a)SU2, and 8...
CVE-2011-1606
Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...
Asterisk 1.8.x - SIP INVITE Request User Enumeration
Asterisk 1.8.x - SIP INVITE Request User Enumeration source: https://www.securityfocus.com/bid/47676/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisks 1.8. The...
Asterisk 1.8.x - SIP INVITE Request User Enumeration
source: https://www.securityfocus.com/bid/47676/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisks 1.8. The following request is available: INVITE sip:192.168.2.1...
Asterisk 1.8.x SIP User Enumeration
Asterisk, sip response permit username identification through use INVITE Author: francesco.tornieri "At" verona-wireless.net Summary: Sip responses permit user identification Release Date: 01/05/2011 Criticality level: Low Impact: Information leak Software: Asterisk 1.8.x tested 1.8.3.2...
