SX Design sipd 0.1.20.1.4 - Remote Format String

SX Design sipd 0.1.20.1.4 - Remote Format String source: https://www.securityfocus.com/bid/9236/info sipd has been reported prone to a format string vulnerability that may be triggered remotely. It has been reported that sip URI arguments passed to the affected server are not sufficiently handled...

SX Design sipd 0.1.2/0.1.4 - Remote Format String

source: https://www.securityfocus.com/bid/9236/info sipd has been reported prone to a format string vulnerability that may be triggered remotely. It has been reported that sip URI arguments passed to the affected server are not sufficiently handled. An attacker may place format specifiers in the...

CVE-2003-0761

Buffer overflow in the getmsgtext of chansip.c in the Session Initiation Protocol SIP protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain 1 MESSAGE or 2 INFO requests...

CVE-2003-0761

Buffer overflow in the getmsgtext of chansip.c in the Session Initiation Protocol SIP protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain 1 MESSAGE or 2 INFO requests...

DEBIAN-CVE-2003-0761

Buffer overflow in the getmsgtext of chansip.c in the Session Initiation Protocol SIP protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain 1 MESSAGE or 2 INFO requests...

asterisk multiple bugs

Buffer overflow during SIP negotiation, SQL injection...

CVE-2003-0761

Buffer overflow in the getmsgtext of chansip.c in the Session Initiation Protocol SIP protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain 1 MESSAGE or 2 INFO requests...

CVE-2003-0761

CVE-2003-0761 describes a buffer overflow in the get_msg_text function of chan_sip.c within the SIP implementation of Asterisk, affecting releases prior to August 15, 2003. The flaw allows remote attackers to cause arbitrary code execution via certain MESSAGE or INFO requests. Affected component:...

CVE-2003-0761

Buffer overflow in the getmsgtext of chansip.c in the Session Initiation Protocol SIP protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain 1 MESSAGE or 2 INFO requests...

[NEWS] Asterisk SIP Implementation Issue

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Cisco SIP Crafted INVITE Message Handling DoS (CSCdz39284, CSCdz41124)

It is possible to make the remote IOS crash when sending it malformed SIP packets. These vulnerabilities are documented as CISCO bug id CSCdz39284 and CSCdz41124. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11380; scriptversion"1.21"; scriptcveid"CVE-2003-1109";...

Multiple products SIP protocol implementation vulnerabilities

Multiple vulnerabilities in multiple products of multiple vendors...

Multiple Product Vulnerabilities Found by PROTOS SIP Test Suite

...

CVE-2002-0669

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows administrators to cause a denial of service by modifying the SIPAUTHENTICATESCHEME value to force authentication of incoming calls, which does not notify the user when an authentication failure occurs...

CVE-2002-0669

The CVE-2002-0669 issue affects Pingtel xpressa SIP-based phones (versions 1.2.5–1.2.7.4). By changing SIP_AUTHENTICATE_SCHEME, an attacker can force authentication of incoming calls, causing a denial of service where neither caller nor callee is informed of the failure. The vulnerability stems f...

CVE-2002-0669

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows administrators to cause a denial of service by modifying the SIPAUTHENTICATESCHEME value to force authentication of incoming calls, which does not notify the user when an authentication failure occurs...

CVE-2002-1935

Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable 1 Call-ID, 2 CSeq, and 3 "To" and "From" SIP URL values in a Session Identification Protocol SIP request, which allows remote attackers to avoid registering with the SIP registrar...

PT-2002-2656 · Pingtel · Pingtel Xpressa

Name of the Vulnerable Software and Affected Versions: Pingtel Xpressa versions 1.2.5 through 2.0.1 Description: The issue allows remote attackers to avoid registering with the SIP registrar by exploiting predictable values in a Session Identification Protocol SIP request, specifically the Call-I...

Multiple problems with Pingtel xpressa SIP Phones

Multiple problems leading to full remote access...

More Vulnerabilities with Pingtel xpressa SIP-based IP phones

The Sys-Security Group Security Advisory "More Vulnerabilities with Pingtel xpressa SIP-based IP Phones" Release Date: 08/20/2002 Affected Platforms: Pingtel xpressa SIP IP phones model PX-1 with software version 2.0.1 and below; Pingtel instant xpressa softphones with software version 2.0.1 and...