CVE-2007-3319

The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications...

Design/Logic Flaw

The Avaya 4602 SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denial of service device reboot via a flood of packets to the BOOTP port 68/udp...

Authorization

The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications...

Session fixation

The Session Initiation Protocol SIP User Access Client UAC message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service device crash via a malformed SIP message...

Code injection

The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact...

CVE-2007-3317

The Session Initiation Protocol SIP User Access Client UAC message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service device crash via a malformed SIP message...

CVE-2007-3322

The CVE concerns the Avaya 4602 SIP IP Phone (Model 4602D02A) running firmware version 2.2.2 and earlier. The vulnerability arises from using a constant media port for calls, which enables remote attackers to cause a denial of service (audio quality loss) by flooding the RTP port. The connected d...

CVE-2007-3321

The Avaya 4602 SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denial of service device reboot via a flood of packets to the BOOTP port 68/udp...

CVE-2007-3320

The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact...

CVE-2007-3319

The CVE-2007-3319 entry concerns the Avaya 4602SW IP Phone (Model 4602D02A) with SIP firmware 2.2.2 and earlier, which does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication. This omission allows remote attackers to perform man-in-the-middle...

CVE-2007-3322

The Avaya 4602 SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows remote attackers to cause a denial of service audio quality loss via a flood of packets to the RTP port...

CVE-2007-3318

The CVE-2007-3318 entry affects Avaya one-X Desktop Edition (version 2.1.0.70 and earlier). A buffer overflow in the SIP UAC message parsing module can be triggered by a malformed SIP message, allowing remote attackers to cause a denial of service (call reception outage). Connected sources confir...

CVE-2007-3317

The CVE-2007-3317 entry concerns Avaya one-X Desktop Edition. The affected component is the SIP User Access Client (UAC) message parsing module, with versions 2.1.0.70 and earlier. The documented issue is that remote attackers can trigger a denial of service resulting in a device crash by sending...

CVE-2007-3320

Summary: CVE-2007-3320 affects the Avaya 4602SW IP Phone (Model 4602D02A) with SIP firmware 2.2.2 and earlier. The device accepts SIP INVITE requests from arbitrary source IP addresses, enabling remote attackers to cause an unspecified impact. The root cause is lack of source-IP filtering for INV...

CVE-2007-3318

Buffer overflow in the Session Initiation Protocol SIP User Access Client UAC message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service call reception outage via a malformed SIP message...

CVE-2007-3319

The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications...

SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================== SerWeb 0.9.4 loadlang.php Remote File Inclusion Exploit ========================================================== !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software,...

SIP Client Detection

Binary data 4106.prm...

serweb094-rfi.txt

!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion

!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...