SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion

!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

Snom-320 SIP电话远程非授权访问信息泄露漏洞

Snom-320是一款功能强大的SIP业务电话。 Snom-320在处理数据交互时存在漏洞，远程攻击者可能利用此漏洞获取敏感信息。 Snom-320内嵌了Web服务器支持终端用户配置，该服务器默认监听在标准的HTTP 80端口。除了这个端口外，Snom-320电话还打开了TCP 1800端口。如果通过浏览器访问了1800端口的话，就会无须任何口令便显示以下信息： Missed Calls Date Time Missed Local Identity Number --/--/---- 5:09PM 1 [email protected] Snom A Received Calls Da...

Nortel Networks SIP多媒体PC客户端远程溢出及拒绝服务漏洞

北电的SIP多媒体PC客户端可为用户提供强大的通讯功能，包括IP电话、即时通讯等。 SIP多媒体PC客户端中的电话组件的SIP头解析模块中存在缓冲区溢出漏洞，如果远程攻击者发送了畸形的SIP消息的话，就可能触发这个溢出，导致执行任意指令；此外，发送类似的畸形消息还可能导致电话组件拒绝服务。 Nortel Networks 多媒体PC客户端SIP电话 release 4.1, v3.5.208 Nortel Networks --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

SJPhone SIP Client INVITE Transaction Remote DoS

Binary data 4105.prm...

AOL Instant Messenger <= 6.1.32.1 SIP INVITE Message DoS

Binary data 4103.prm...

Authentication flaw

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator are affected prior to version 4.5.2. The vulnerability allows remote attackers to bypass SIP authentication via a specific maddr parameter, effectively defeating authentication for SIP sessions. The advisory wording indicates the issue exists in versions before 4.5.2...

InGate Firewall和SIParator存在多个未明漏洞

InGate Firewall/SIParator是具备SIP功能的企业级防火墙。 InGate Firewall/SIParator存在多个未明问题，远程攻击者可以利用漏洞绕过SIP验证需要访问敏感信息。 目前没有详细漏洞细节提供。 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2...

Code injection

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...

CVE-2007-1693

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...

CVE-2007-1693

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...

CVE-2007-1693

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...

CVE-2007-1693

The CVE-2007-1693 issue affects Yet Another Telephony Engine (Yate) before version 1.2.0. The SIP channel module reads the Call-Info header and uses the header’s purpose parameter to set caller_info_uri; a programming error causes a NULL dereference when the purpose param is missing, allowing rem...

Radware Security Advisory - Yate 1.1.0 Denial of Service Vulnerability

Yate 1.1.0 Denial of Service Vulnerability Risk: Medium Background: Yate Yet Another Telephony Engine is a production-ready next-generation telephony engine. More information about this application could be obtained from the following site: http://yate.null.ro/ Description: The SIP channel module...

Yate VoIP server DoS

NULL pointer dereference on absent "purpose" parameter of SIP "Call-Info" header...

Asterisk SIP T.38 SDP解析远程栈溢出漏洞

Asterisk是一款PBX系统的软件，运行在Linux系统上，支持使用SIP、IAX、H323协议进行IP通话。 Asterisk的SIP/SDP处理器中存在多个远程栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果所发送SIP报文中的SDP数据包含有超长的T38参数的话，就可以触发这个溢出，导致执行任意代码。这个漏洞是由chansip.c文件中的processsdp函数调用sscanf所导致的： else if sscanfa, "T38FaxRateManagement:%s", s == 1 found = 1; if optiondebug 2 astlogLOGDEBUG...

CVE-2007-2293

Multiple stack-based buffer overflows in the processsdp function in chansip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long 1 T38FaxRateManagement or 2 T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP...

CVE-2007-2297

The SIP channel driver chansip in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service crash...