CVE-2010-0150

CVE-2010-0150 affects Cisco ASA 5500 Series and Cisco PIX 500 Series, where malformed SIP messages sent to transit traffic can trigger a denial-of-service that reloads the device when SIP inspection is enabled. Cisco’s advisory ties this to two SIP-inspection DoS bugs (CSCsy91157 and CSCtc96018) ...

CVE-2010-0569

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0150

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.05.2, 8.1 before 8.12.37, and 8.2 before 8.21.16; and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service device reload via...

CVE-2010-0569

CVE-2010-0569 is a Cisco ASA 5500 Series SIP Inspection DoS vulnerability. A malformed SIP message can trigger a reload of the appliance, affecting ASA versions 7.x, 8.0.x, 8.1.x and 8.2.x (including PIX 500). The Cisco advisory CSCsa-20100217-asa lists affected bug IDs CSCtc96018 among others an...

Asterisk T.38 Negotiation Remote DoS Vulnerability (AST-2010-001)

Asterisk is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

X-Lite SIP 3 Memory Corruption

!/usr/bin/python X-lite SIP v3 wav memory corruption Heap BOF exploit Date: 06-02-2010 Author: TecR0c Software Link: http://xlite.counterpath.com/download/win32beta100120 Version: 3.0 Tested on: Windows XP SP3 Usage: right click running application options Alerts & sounds import -- boom! header =...

X-lite SIP v3 (wav) memory corruption Heap BOF exploit

Exploit for unknown platform in category local exploits ====================================================== X-lite SIP v3 wav memory corruption Heap BOF exploit ====================================================== !/usr/bin/python X-lite SIP v3 wav memory corruption Heap BOF exploit Date:...

X-lite SIP 3.0 - wav memory Corruption Heap Buffer Overflow

X-lite SIP 3.0 - wav memory Corruption Heap Buffer Overflow !/usr/bin/python X-lite SIP v3 wav memory corruption Heap BOF exploit Date: 06-02-2010 Author: TecR0c Software Link: http://xlite.counterpath.com/download/win32100106 Version: 3.0 Tested on: Windows XP SP3 Usage: right click running...

X-lite SIP 3.0 - 'wav' memory Corruption Heap Buffer Overflow

!/usr/bin/python X-lite SIP v3 wav memory corruption Heap BOF exploit Date: 06-02-2010 Author: TecR0c Software Link: http://xlite.counterpath.com/download/win32100106 Version: 3.0 Tested on: Windows XP SP3 Usage: right click running application options Alerts & sounds import -- boom! header =...

CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

DEBIAN-CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

Code injection

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

CVE-2010-0441

Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service daemon crash via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is 1 missing, 2 modified ...

CVE-2010-0441

CVE-2010-0441 affects Asterisk Open Source and Business Edition C.3, where remote attackers can crash the daemon via SIP T.38 negotiation when the SDP FaxMaxDatagram field is missing, negative, or excessively large. Affected versions include Asterisk 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1....

Asterisk integer overflow

Integer overflow on T.38 over SIP FaxMaxDatagram field parsing...

AST-2010-001: T.38 Remote Crash Vulnerability

Asterisk Project Security Advisory - AST-2010-001 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | T.38 Remote Crash Vulnerability |...

Security Best Practice: SIP Protocol Enforcement

The Session Initiation Protocol SIP is a signaling protocol, widely used for controlling multimedia communication sessions such as voice and video calls over Internet Protocol IP. The protocol can be used for creating, modifying and terminating two-party unicast or multiparty multicast sessions...