4549 matches found
PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom...
Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit
No description provided by source. / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes: tested on Debian Sarge Linux...
Aastra IP Phone 9480i Web Interface Data disclosure Vulnerability
No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...
SX Design sipd 0.1.2 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9198/info It has been reported that sipd may be prone to a vulnerability that may allow a remote attacker to cause a denial of service condition in the software. The problem is reported to exist in the gethostbynamer...
AsteriDex <= 3.0 - Remote (callboth.php) Remote Code Execution Exploit
No description provided by source. Begin exploit !/bin/bash echo Asteridex PoC Exploit callboth.php vulnerability echo By Carl Livitt / Hoku Security / June 2007 echo This has to be a a valid SIP address, and b must answer when dialled. The exploit will fail without these conditions being met...
Microsoft Office (2010 beta) Communicator SIP Denial of Service Exploit
No description provided by source. ======================================================================================== | Title : Microsoft Office 2010 beta Communicator SIP denial of service Exploit | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested...
KPhone 2.x/3.x/4.0.1 Malformed STUN Packet Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10159/info A denial of service vulnerability has been reported in KPhone. This issue may be triggered by a malformed SIP Session Initiation Protocol STUN message. This is due to insufficient validation of user-specified...
FreePBX 2.2 SIP Packet Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23575/info FreePBX is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content. Attacker-supplied HTML and script...
Asterisk <= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die Usage $0 dst dport dusername src sport susername unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...
SX Design sipd 0.1.2/0.1.4 - Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9236/info sipd has been reported prone to a format string vulnerability that may be triggered remotely. It has been reported that sip URI arguments passed to the affected server are not sufficiently handled. An attacker m...
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String DoS
No description provided by source. source: http://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. INVITE sip:[email protected] SIP/2.0 Via:...
Qutecom Softphone 2.2.1 Heap Overflow DoS/Crash Proof of Concept
No description provided by source. Title: Qutecom Cross-platform, open source softphone Heap Overflow DoS/Crash Proof of Concept Date: 14th June 2012 Exploit Author: Debasish Mandal Author's Blog : http://www.debasish.in/ Vendor Homepage: http://qutecom.org/ Software Link:...
NCH Officeintercom <= 5.20 - Remote Denial of Service Vulnerability
No description provided by source. !/usr/bin/python Exploit Title: NCH Officeintercom = v5.20 Remote Denial of Service Vulnerability Date: 11/24/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link:...
eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Exploit
No description provided by source. / eStara Softphone buffer overflow exploit tested on : eStara Softphone 3.0.1.14 |||||| eStara Softphone 3.0.1.46 Vender website : http://www.estara.com/softphone/softph.exe Run this application, then use nc to send builded packet : nc -u 127.0.0.1 5060...
Thomson SpeedTouch 2030 SIP Empty Message Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25464/info Thomson SpeedTouch 2030 is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages. Exploiting this issue allows remote attackers to cause the device ...
Thomson SpeedTouch 2030 SIP Invite Message Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25446/info Thomson SpeedTouch 2030 is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages. Exploiting this issue allows remote attackers to cause the device ...
Asterisk 1.x - BYE Message Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27110/info Asterisk is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to cause the application to crash, effectively denying service to legitimate users. BYE...
Polycom IP Phone Web Interface Data Diclosure Vulnerability
No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...
Yealink VoIP Phone SIP-T38G Multiple Vulnerabilities
Yealink VoIP Phone devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cross site request forgery (csrf)
The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service deadlock by terminating a subscription request before it is complete, which triggers a SIP transaction timeout...