Interaction SIP proxy VoIP gateway memory corruption

Heap memory corruption on SIP request processing...

Interaction SIP Proxy 3.0 - Remote Heap Corruption Denial of Service

source: https://www.securityfocus.com/bid/16001/info Interaction SIP Proxy is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied input data, resulting in a heap memory corruption. This issue allows remo...

Interaction SIP Proxy 3.0 - Remote Heap Corruption Denial of Service

Interaction SIP Proxy 3.0 - Remote Heap Corruption Denial of Service source: https://www.securityfocus.com/bid/16001/info Interaction SIP Proxy is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied inpu...

CVE-2005-4050

CVE-2005-4050 describes a buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08. The vulnerability arises from processing a long SIP INVITE field, allowing a remote attacker to execute arbitrary code. Affected product family: MultiVOIP devices (vendor: Multi-T...

CVE-2005-4050

Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol SIP packet...

MultiTech MultiVoIP VoIP gateway SIP buffer overflow

Buffer overflow on oversized SIP packet INVITE field...

[Full-disclosure] Buffer Overflow in MultiTech VoIP Implementations

SecurityLab Technologies, Inc. --- www.securitylab.net --- Security Advisory Advisory Name: Buffer Overflow in MultiTech VoIP Implementations Release Date: December 05, 2005 Application: MultiVoIP Gateway Platform: Multiple Severity: Moderate Author: Ejovi Nuwere SLABresearchATsecuritylab.net...

sxdesign SIPd Status Server Detection

A SIP status server is running on this port. An attacker may use the remote status information of this server to collect sensitive information such as server version, emails, and ip addresses internal and external. OpenVAS Vulnerability Test $Id: sipstatusserver.nasl 8023 2017-12-07 08:36:26Z...

SIP Service Detection (UDP)

UDP based detection of services supporting the Session Initiation Protocol SIP. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SIP Service Detection (TCP)

TCP based detection of services supporting the Session Initiation Protocol SIP. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SIP Express Router Register Buffer Overflow

The remote host is running a SIP Express Router. A bug has been found in the remote device which may allow an attacker to crash this device by sending a too long contact list in REGISTERs. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced source...

SIP Express Router Missing To in ACK DoS

The remote host is a SIP Express Router SER. The SER product has been found to contain a vulnerability where ACKs requests without a To header, when SER has been enabled to use the SL module, can be used to crash the product. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might ...

sxdesign SIPd Status Server Detection

A SIP status server is running on this port. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hardware Cisco IP phones SIP messages spoofing

Due to insufficient data validation an attacker can send Messages-Waiting message to phone...

VoIP-Phones: Weakness in proccessing SIP-Notify-Messages

Tele-Consulting GmbH security | networking | training advisory 05/07/06 URL of this advisory: http://pentest.tele-consulting.com/advisories/050706voip-phones.txt Topic: Weakness in implemenation of proccessing SIP-Notify-Messages in VoIP-Phones. Summary: Due to ignoring the value of 'Call-ID' and...

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling

source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The issue arises because the affected phones do not verify the 'Call-ID...

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling

Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The...

CVE-2002-1935

Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable 1 Call-ID, 2 CSeq, and 3 "To" and "From" SIP URL values in a Session Identification Protocol SIP request, which allows remote attackers to avoid registering with the SIP registrar...

CVE-2002-1935

Pingtel Xpressa versions 1.2.5 through 2.0.1 are affected by CVE-2002-1935 due to predictable Call-ID, CSeq, and To/From SIP URL values in SIP requests, which can let remote attackers avoid registering with the SIP registrar. The root cause is the lack of randomness in SIP identifiers, enabling a...

CVE-2002-1934

CVE-2002-1934 affects Pingtel xpressa SIP-based VoIP phones version 1.2.5 through 2.0.1. The vulnerability leaks sensitive information during boot-up, allowing an attacker to obtain the MD5 hashes of the Admin password, the physical password, and other registration data. The available connected s...