4549 matches found
Asterisk SIP INVITE请求处理拒绝服务漏洞
CVE ID:CVE-2014-2287 Asterisk是一款实现电话用户交换机（PBX）功能的自由软件、开源软件。 Asterisk处理特制的SIP INVITE请求时存在漏洞，由于没有正确释放文件描述符，允许远程攻击者利用漏洞提交恶意请求消耗完所有可用文件描述符，进行拒绝服务攻击。 0 Asterisk Open Source 1.8.26.0 Asterisk Open Source 11.8.0 Asterisk Open Source 12.1.0 Certified Asterisk 1.8.15-cert4 Certified Asterisk 11.6-cert1...
FreeBSD : asterisk -- multiple vulnerabilities (03159886-a8a3-11e3-8f36-0025905a4771)
The Asterisk project reports : Stack Overflow in HTTP Processing of Cookie Headers. Sending a HTTP request that is handled by Asterisk with a large number of Cookie headers could overflow the stack. You could even exhaust memory if you sent an unlimited number of headers in the request. Denial of...
Cisco 9900 Series IP Phone Crafted Header Unregister Vulnerability
According to its self-reported version, the version of the Cisco Unified IP Phone software running on the remote device does not properly process SIP headers. By sending a specially crafted SIP header to the device, a remote attacker may be able to cause the phone to unregister, resulting in a...
CVE-2014-0721
The Cisco Unified SIP Phone 3905 with firmware before 9.41 allows remote attackers to obtain root access via a session on the test interface on TCP port 7870, aka Bug ID CSCuh75574...
Design/Logic Flaw
The Cisco Unified SIP Phone 3905 with firmware before 9.41 allows remote attackers to obtain root access via a session on the test interface on TCP port 7870, aka Bug ID CSCuh75574...
CVE-2014-0721
The CVE-2014-0721 entry concerns the Cisco Unified SIP Phone 3905 with firmware before 9.4(1). The vulnerability stems from an undocumented test interface exposed on TCP port 7870, which an unauthenticated, remote attacker could use to gain root-level access to the device. Impact stated in source...
CVE-2014-0721
The Cisco Unified SIP Phone 3905 with firmware before 9.41 allows remote attackers to obtain root access via a session on the test interface on TCP port 7870, aka Bug ID CSCuh75574...
Cisco Unified SIP Phone 3905未授权访问漏洞
Bugtraq ID:65663 CVE ID:CVE-2014-0721 Cisco Unified SIP Phone 3905是一款价格经济的IP电话。 Cisco Unified SIP Phone 3905存在未文档化的测试接口，允许远程攻击者连接该接口获得对设备的root访问。 0 Cisco Unified SIP Phone 3905 厂商补丁： Cisco ----- Cisco Unified SIP Phone 3905固件版本9.41已经修复该漏洞，建议用户下载更新： http://www.cisco.com/public/sw-center/...
Unauthorized Access Vulnerability in Cisco Unified SIP Phone 3905
A vulnerability in the Cisco Unified SIP Phone 3905 could allow an unauthenticated, remote attacker to gain root-level access to an affected device. Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available. This advisory i...
Cisco UCS Director Software Has Default Credentials Open to Attackers
Cisco’s UCS Director infrastructure management product contains a set of default credentials that any remote attacker can exploit to take complete control of any vulnerable machine. The flaw is in UCS Director versions 4.0.0.2 and below. The Cisco UCS Director software is designed to allow...
Pidgin libpurple SIP/SIMPLE Content-Length Integer Overflow Vulnerability
Talos Vulnerability Report VRT-2013-1004 Pidgin libpurple SIP/SIMPLE Content-Length Integer Overflow Vulnerability January 26, 2014 CVE Number CVE-2013-6490 Description An exploitable remote code execution vulnerability exists in Pidgin’s implementation of SIP/SIMPLE message handling. An attacker...
CVE-2014-0662
The SIP module in Cisco TelePresence Video Communication Server VCS before 8.1 allows remote attackers to cause a denial of service process failure via a crafted SDP message, aka Bug ID CSCue97632...
Code injection
The SIP module in Cisco TelePresence Video Communication Server VCS before 8.1 allows remote attackers to cause a denial of service process failure via a crafted SDP message, aka Bug ID CSCue97632...
CVE-2014-0662
The CVE describes a denial-of-service in the SIP module of Cisco TelePresence Video Communication Server (VCS) before 8.1, exploitable by a crafted SDP message. The vulnerability stems from the SIP component and affects remote attackers with network access, potentially causing process failure. Ci...
CVE-2014-0662
The SIP module in Cisco TelePresence Video Communication Server VCS before 8.1 allows remote attackers to cause a denial of service process failure via a crafted SDP message, aka Bug ID CSCue97632...
Cisco TelePresence Video Communication Server SIP Denial of Service Vulnerability
Cisco TelePresence Video Communication Server VCS contains a vulnerability that could allow an unauthenticated, remote attacker to trigger the failure of several critical processes which may cause active call to be dropped and prevent users from making new calls until the affected system is...
SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8708 / 8709)
wireshark was updated to security update version 1.8.12, fixing bugs and security issues. - The SIP dissector could go into an infinite loop. wnpa-sec-2013-66. CVE-2013-7112 - The NTLMSSP v2 dissector could crash. Discovered by Garming Sam. wnpa-sec-2013-68 CVE-2013-7114 Further bug fixes and...
Cisco 9900 Series IP Phone Crafted Header Unregister Vulnerability
A vulnerability in Session Initiation Protocol SIP header processing of Cisco fourth-generation IP phones could allow an unauthenticated, remote attacker to cause the IP phone to unregister. The vulnerability is due to improper SIP header processing. An attacker could exploit this vulnerability b...