CounterPath X-Lite 3.x - SIP phone Remote Denial of Service

CounterPath X-Lite 3.x - SIP phone Remote Denial of Service /main.cpp/ include include using namespace std; ifdef WIN32 include pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0...

WengoPhone 2.x - SIP Phone Remote Denial of Service

/main.cpp/ include include using namespace std; ifdef WIN32 include pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0 define readfroma,b,c,d,e recvfroma, b, c, 0, d, e else includ...

Code injection

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749...

CVE-2007-4292

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service device crash via a malformed SIP packet, aka 1 CSCsf11855, 2 CSCeb21064, 3 CSCse40276, 4 CSCse68355, 5 CSCsf30058, 6 CSCsb24007, and 7 CSCsc60249...

Code injection

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service device crash via a malformed SIP packet, aka 1 CSCsf11855, 2 CSCeb21064, 3 CSCse40276, 4 CSCse68355, 5 CSCsf30058, 6 CSCsb24007, and 7 CSCsc60249...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...

CVE-2007-4294

Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...

CVE-2007-4295

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749...

CVE-2007-4292

Cisco IOS 12.0–12.4 memory leaks in the SIP processing path allow remote attackers to cause a denial of service (device crash). The CVE references seven CSC memory-leak variants (e.g., CSCsf11855, CSCeb21064, CSCse40276, CSCse68355, CSCsf30058, CSCsb24007, CSCsc60249). Exploitation details are no...

CVE-2007-4295

Cisco IOS 12.0–12.4 is affected by CVE-2007-4295, a remote code execution vulnerability triggered by a malformed SIP packet (aka CSCsi80749). The issue is documented across multiple sources (NVD, Cisco security advisory, and Nessus plugin) as a network-facing flaw that can allow arbitrary code ex...

CVE-2007-4294

CVE-2007-4294 describes an unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, 6.0 and Cisco IOS 12.0–12.4 that allows remote code execution via a malformed SIP packet (CSCsi80102). The connected documents confirm affected products and versions and that exploitation...

CVE-2007-4295

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749...

CVE-2007-4294

Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...

CVE-2007-4292

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service device crash via a malformed SIP packet, aka 1 CSCsf11855, 2 CSCeb21064, 3 CSCse40276, 4 CSCse68355, 5 CSCsf30058, 6 CSCsb24007, and 7 CSCsc60249...

[Full-disclosure] Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Advisory ID: cisco-sa-20070808-IOS-voice http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...

Cisco VoIP routers multiple DoS conditions

Multiple vulnerabilities in implementation of SIP, MGCP, H.323 and RTP protocols. Device may be vulnerable even i protocol is not configured...

Preemptive Protection against Digium Asterisk SIP Invalid Response Code Denial of Service Vulnerability

A denial of service vulnerability has been discovered in Digium Asterisk. Asterisk is an open source telephone system. It supports a wide range of Voice over IP VOIP protocols, including SIP. SIP Session Initiation Protocol is a protocol that can establish, modify, and terminate numerous multimed...

Asterisk SIP Channel T.38 SDP Parsing Multiple Buffer Overflows

The version of Asterisk running on the remote host contains two stack-based buffer overflows in its SIP SDP handler when attempting to read the 'T38FaxRateManagement:' and 'T38FaxUdpEC:' options in the SDP within a SIP packet. An unauthenticated, remote attacker may be able to leverage this flaw ...

AsteriDex 3.0 - callboth.php Remote Code Execution

AsteriDex 3.0 - callboth.php Remote Code Execution Begin exploit !/bin/bash echo Asteridex PoC Exploit callboth.php vulnerability echo By Carl Livitt / Hoku Security / June 2007 echo This has to be a a valid SIP address, and b must answer when dialled. The exploit will fail without these conditio...

Multiple Remote unauthenticated stack overflows in Asterisk chan_sip.c

======= Summary ======= Name: Multiple Remote unauthenticated stack overflows in Asterisk chansip.c Release Date: 4 July 2007 Reference: NGS00497 Discover: Barrie Dempster [email protected] Vendor: Digium Vendor Reference: ASA-010 Systems Affected: Asterisk 1.4.3; AsteriskNOW Beta6; Asterisk...