An Open Source SIP Sniffer: pcapsipdump

An open-source libpcap-based SIP sniffer with per-call sorting capabilities. Listens on a network interface and saves SIP/RTP sessions to files. Each session goes in a separate, fancy-named .pcap file. Those could be opened with tcpdump, wireshark and friends. SIP/RTP sessions are written to disk...

Asterisk chan_pjsip Incompatible Codecs DoS (AST-2015-001)

According to its SIP banner, the version of Asterisk running on the remote host has a flaw in which it fails to reclaim allocated RTP ports whenever a connection is made to an authenticated endpoint whose SPD offers only codecs that are not allowed by Asterisk. An attacker could exploit this...

Multiple Asterisk Product 'Channels/chan_pjsip' Denial of Service Vulnerabilities

Asterisk is an open source software PBX that supports a variety of VoIP protocols and devices. A denial of service vulnerability exists in multiple Asterisk products 'Channels/chanpjsip', which could be exploited by an attacker to submit a special request to crash an application or launch a denia...

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark9)

The remote Solaris system is missing necessary patches to address security updates : - The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to caus...

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark8)

The remote Solaris system is missing necessary patches to address security updates : - The ieee802154maprec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote...

Cisco TelePresence VCS and Expressway High CPU Utilization Vulnerability

A vulnerability in the SIP code of Cisco TelePresence Video Communication Server VCS and Cisco Expressway could allow an unauthenticated, remote attacker to cause high memory consumption and CPU utilization, which could cause some services to become unavailable and degrade performance. The...

CVE-2015-0579

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...

Code injection

Cisco TelePresence Video Communication Server VCS and Cisco Expressway allow remote attackers to cause a denial of service memory and CPU consumption, and partial outage via crafted SIP packets, aka Bug ID CSCur12473...

CVE-2015-0579

The CVE-2015-0579 issue affects Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway. The root cause is insufficient validation of crafted SIP packets in the SIP handling code, allowing an unauthenticated remote attacker to trigger memory and CPU exhaustion, leading to a denia...

Snom Detection (SIP)

The script attempts to identify a Snom device via a SIP banner. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Snom SIP Phone Denial Of Service

Snom SIP phones www.snom.com have a builtin HTTP/HTTPS configuration interface, which is enabled by default. By making a single HTTP POST request all available memory and CPU can be exhausted, resulting in a reboot of the phone. This even works if the HTTP/HTTPS interface is protected by username...

THC-Hydra 8.1 - Network Logon Cracker

A very fast network logon cracker which support many different services. See feature sets and services coverage page - incl. a speed comparison against ncrack and medusa.Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof of concept...

CVE-2014-6609

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...

CVE-2014-6609

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...

Server side request forgery (ssrf)

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...

CVE-2014-6609

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...

CVE-2014-6609

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...

CVE-2014-6609

The CVE-2014-6609 issue affects Asterisk Open Source 12.x prior to 12.5.1, where the res_pjsip_pubsub module allows remote authenticated users to crash the server by sending crafted SIP SUBSCRIBE requests with mixed headers for a given event package. This results in a denial of service. Root caus...

Asterisk ConfBridge 'dialplan' Privilege Escalation (AST-2014-017)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a privilege escalation vulnerability in the ConfBridge 'dialplan' function that is triggered when executed from an external protocol. This could allow a remote, authenticated...

Asterisk Multiple Vulnerabilities (AST-2014-012 / AST-2014-018)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by the following vulnerabilities : - A security bypass vulnerability exists in the VoIP channel drivers, DUNDi, and Asterisk Manager Interface AMI components which may allow a...