CVE-2016-2960

IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages...

Code injection

IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages...

CVE-2016-2960

IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages...

CVE-2016-2960

IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages...

CVE-2016-2960

CVE-2016-2960 affects IBM WebSphere Application Server: 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 9.0.x before 9.0.0.1 (Liberty as applicable). Description: remote denial of service via crafted SIP messages. CVSS v3.0 base score 3.7 (LOW). IBM security bulletins (and Ne...

CVE-2016-1466

Cisco Unified Communications Manager IM and Presence Service 9.11 SU6, 9.11 SU6a, 9.11 SU7, 10.52 SU2, 10.52 SU2a, 11.01 SU1, and 11.51 allows remote attackers to cause a denial of service sipd process restart via crafted headers in a SIP packet, aka Bug ID CSCva39072...

CVE-2016-1466

Cisco Unified Communications Manager IM and Presence Service 9.11 SU6, 9.11 SU6a, 9.11 SU7, 10.52 SU2, 10.52 SU2a, 11.01 SU1, and 11.51 allows remote attackers to cause a denial of service sipd process restart via crafted headers in a SIP packet, aka Bug ID CSCva39072...

Code injection

Cisco Unified Communications Manager IM and Presence Service 9.11 SU6, 9.11 SU6a, 9.11 SU7, 10.52 SU2, 10.52 SU2a, 11.01 SU1, and 11.51 allows remote attackers to cause a denial of service sipd process restart via crafted headers in a SIP packet, aka Bug ID CSCva39072...

CVE-2016-1466

Cisco Unified Communications Manager IM and Presence Service 9.11 SU6, 9.11 SU6a, 9.11 SU7, 10.52 SU2, 10.52 SU2a, 11.01 SU1, and 11.51 allows remote attackers to cause a denial of service sipd process restart via crafted headers in a SIP packet, aka Bug ID CSCva39072...

Asterisk TLS Certificate Common Name NULL Byte Vulnerability (AST-2015-003)

Asterisk is prone to a certificate bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if...

Cisco Unified Communications Manager IM and Presence Service SIP Packet Processing Denial of Service Vulnerability

A vulnerability in Session Initiation Protocol SIP processing functions of the Cisco Unified Communications Manager Instant Messaging IM and Presence Service could allow an unauthenticated, remote attacker to cause the Cisco SIP Proxy Daemon sipd process to restart unexpectedly, resulting in a...

Cisco Unified Communications Manager IM and Presence Service SIP Packet Processing Denial of Service Vulnerability

A vulnerability in Session Initiation Protocol SIP processing functions of the Cisco Unified Communications Manager Instant Messaging IM and Presence Service could allow an unauthenticated, remote attacker to cause the Cisco SIP Proxy Daemon sipd process to restart unexpectedly, resulting in a...

asterisk -- Crash on ACK from unknown endpoint

The Asterisk project reports: Asterisk can be crashed remotely by sending an ACK to it from an endpoint username that Asterisk does not recognize. Most SIP request types result in an "artificial" endpoint being looked up, but ACKs bypass this lookup. The resulting NULL pointer results in a crash...

Hitron CGNV4 Router Security Bypass Vulnerability

Hitron CGNV4 is a router product from Hitron. A security bypass vulnerability exists in Hitron CGNV4 Router version 4.3.9.9-SIP-UPC, which can be exploited by attackers to obtain sensitive information and perform unauthorized operations...

Hitron CGNV4 Modem / Router 4.3.9.9-SIP-UPC - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Hitron CGNV4 modem/router multiple vulnerabilities -------------------------------------------------- Platforms / Firmware confirmed affected: - Hitron CGNV4, 4.3.9.9-SIP-UPC - Product page:...

The vulnerabilities of Cisco IOS, Cisco IOS XE, and the Cisco Unified Communications Management system allow a perpetrator to cause service interruptions.

The vulnerability of SIP protocol implementations in Cisco IOS, Cisco IOS XE, and the Cisco Unified Communications Manager system is related to insufficient processing of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions such as device restarts or...

ATCOM PBX Detection (SIP)

Detection of ATCOM PBX. The script attempts to identify ATCOM via SIP banner to extract the version number. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Design/Logic Flaw

Cisco TelePresence Video Communications Server VCS X8.x before X8.7.2 allows remote attackers to cause a denial of service service disruption via a crafted URI in a SIP header, aka Bug ID CSCuy43258...

CVE-2016-1400

Cisco TelePresence Video Communications Server (VCS) X8.x, prior to X8.7.2, is affected by CVE-2016-1400. A remote attacker can cause a denial of service by sending a crafted SIP header URI, due to a malformed SIP header handling in VCS. Affected product family: Cisco VCS; vulnerable component: S...

CVE-2016-1400

Cisco TelePresence Video Communications Server VCS X8.x before X8.7.2 allows remote attackers to cause a denial of service service disruption via a crafted URI in a SIP header, aka Bug ID CSCuy43258...