4551 matches found
CVE-2008-0263
The SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP media ports in unspecified call hold and send-only stream scenarios, which allows remote attackers to cause a denial of service port exhaustion via unspecified vectors...
CVE-2008-0263
The SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP media ports in unspecified call hold and send-only stream scenarios, which allows remote attackers to cause a denial of service port exhaustion via unspecified vectors...
CVE-2008-0263
The CVE-2008-0263 entry concerns the SIP module in Ingate Firewall (before 4.6.1) and SIParator (before 4.6.1). The vulnerability arises because SIP media ports are not reused in unspecified call hold and send-only stream scenarios, which can lead to port exhaustion and a denial of service. The a...
Ingate Firewall及SIParator远程拒绝服务漏洞
BUGTRAQ ID: 27222 Ingate Firewall和SIParator都是企业级的硬件防火墙设备。 Ingate Firewall和SIParator处理SIP协议数据时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 某些情况下Ingate Firewall和SIParator在呼叫结束后没有重新使用SIP媒体端口，这可能导致耗尽所有可用端口，无法创建新的呼叫。 Ingate Firewall 4.6.1 Ingate SIParator 4.6.1 厂商补丁： Ingate ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Ubuntu 6.06 LTS / 6.10 / 7.04 : opal vulnerability (USN-562-1)
Jose Miguel Esparza discovered that certain SIP headers were not correctly validated. A remote attacker could send a specially crafted packet to an application linked against opal e.g. Ekiga causing it to crash, leading to a denial of service. Note that Tenable Network Security has extracted the...
USN-562-1: opal vulnerability
Jose Miguel Esparza discovered that certain SIP headers were not correctly validated. A remote attacker could send a specially crafted packet to an application linked against opal e.g. Ekiga causing it to crash, leading to a denial of service...
CVE-2008-0095
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...
Null pointer dereference
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...
DEBIAN-CVE-2008-0095
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...
CVE-2008-0095
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...
CVE-2008-0095
Asterisk Open Source 1.4.x (and related editions) is affected by a remote DoS via a crafted BYE message containing an Also header, triggering a NULL pointer dereference and daemon crash. The vulnerable range includes 1.4.x before 1.4.17, with affected builds in Business Edition before C.1.0-beta8...
CVE-2008-0095
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...
CVE-2008-0095
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service daemon crash...
Asterisk SIP Also transfer DoS
NULL pointer dereference on BYE message parsing...
AST-2008-001: Crash from transfer using BYE with Also header
Asterisk Project Security Advisory - AST-2008-001 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...
AST-2007-027 - Database matching order permits host-based authentication to be ignored
Asterisk Project Security Advisory - AST-2007-027 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Database matching order permits host-based | | | authenticatio...
Code injection
Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...
CVE-2007-5583
Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...
CVE-2007-5583
Cisco IP Phone 7940 with firmware P0S3-08-7-00 is affected by CVE-2007-5583, a denial-of-service vulnerability caused by a sequence of SIP INVITE transactions where the Request-URI lacks a user name. Remote attackers can trigger 486 Busy responses or a device reboot. The vulnerability is document...
CVE-2007-6371
CVE-2007-6371 affects Nokia N95 with RM-159 firmware 12.0.013. A remote attacker can cause a denial of service by sending a SIP INVITE, followed by an immediate SIP CANCEL, then a second SIP INVITE in a different session. The connected documents do not specify a fix or patch version. No exploitat...