Cisco TelePresence CVE-2013-3377 Malformed SIP Packet Handling Remote DoS

According the self-reported version returned by the SNMP service on the remote device, it is affected by a denial of service vulnerability that can be triggered by sending a specially crafted SIP packet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69048;...

Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability (cisco-sa-20120926-cucm)

Cisco Unified Communications Manager contains a vulnerability in its Session Initiation Protocol SIP implementation that could allow an unauthenticated, remote attacker to cause a critical service to fail, which could interrupt voice services. Affected devices must be configured to process SIP...

CVE-2013-3401

The SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger unintended use of NOTIFY messages via unspecified vectors, aka Bug ID CSCud96080...

Code injection

The SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger unintended use of NOTIFY messages via unspecified vectors, aka Bug ID CSCud96080...

CVE-2013-3401

The CVE-2013-3401 issue affects the SIP implementation in Cisco TelePresence TC Software. It arises from errors in the SIP stack that allow an unauthenticated, remote attacker to cause unintended NOTIFY messages, potentially impacting the integrity of communications. Cisco’s advisory notes that e...

Cisco TC Software SIP Implementation Vulnerability

A vulnerability in the Session Initiation Protocol SIP implementation used in TC Software could allow an unauthenticated, remoteattacker to cause an endpoint to process unintended SIP NOTIFY messages. The vulnerability is due to errors in the SIP implementation. An attacker could exploit this...

Digium Asterisk SIP SDP Header Parsing Stack Buffer Overflow (CVE-2013-2685)

A buffer overflow vulnerability exists in Asterisk Open Source...

CVE-2013-3378

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service temporary device hang via crafted SIP packets, aka Bug ID CSCuf89557...

CVE-2013-3377

Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCue01743...

Code injection

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service temporary device hang via crafted SIP packets, aka Bug ID CSCuf89557...

CVE-2013-3378

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 are affected by a denial-of-service vulnerability in SIP handling that can be triggered by specially crafted SIP packets, leading to a temporary device hang. The issue is documented as Bug CSCuf89557, with Cisco’s advisory cis...

CVE-2013-3378

Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service temporary device hang via crafted SIP packets, aka Bug ID CSCuf89557...

CVE-2013-3377

CVE-2013-3377 affects Cisco TelePresence TC Software prior to 5.1.7 and TE Software prior to 4.1.3. The vulnerability allows remote attackers to cause a DoS (device reload) by sending crafted SIP packets (Bug ID CSCue01743). Cisco’s advisory (cisco-sa-20130619-tpc) confirms two SIP-related DoS vu...

Multiple Vulnerabilities in Cisco TelePresence TC and TE Software

Cisco TelePresence TC and TE Software contain two vulnerabilities in the implementation of the Session Initiation Protocol SIP that could allow an unauthenticated remote attacker to cause a denial of service DoS condition. Additionally, Cisco TelePresence TC Software contain an adjacent root acce...

Oracle Java SE CVE-2013-2471 Buffer Overflow Vulnerability

Description Oracle Java SE is prone to a buffer-overflow vulnerability in Java Runtime Environment. An attacker can exploit this issue to execute arbitrary code in the context of the current user. This vulnerability affects the following supported versions: 7 Update 21 , 6 Update 45 , 5.0 Update ...

Oracle Java SE CVE-2013-2465 Memory Corruption Vulnerability

Description Oracle Java SE is prone to a memory-corruption vulnerability in Java Runtime Environment. Attackers can exploit this issue to execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions...

YeaLink IP Phone Firmware 9.70.0.100 Missing Authentication

Exploit Title: YeaLink IP Phone SIP-TxxP firmware garnelo.eu Vendor Homepage: http://yealink.com Software Link: http://yealink.com/productlist.aspx?BaseInfoCateId=147&CateId=147&ProductsCateID=147 Version: 9.70.0.100 and lower Tested on: YeaLink IP Phone SIP-T20P and SIP-T26P hardware VoIP phone...

YeaLink IP Phone Firmware <=9.70.0.100 Unauthenticated Phone Call Vulnerability

Exploit for hardware platform in category web applications Exploit Title: YeaLink IP Phone SIP-TxxP firmware garnelo.eu Vendor Homepage: http://yealink.com Software Link: http://yealink.com/productlist.aspx?BaseInfoCateId=147&CateId=147&ProductsCateID=147 Version: 9.70.0.100 and lower Tested on:...

YeaLink IP Phone Firmware 9.70.0.100 - Phone Call

YeaLink IP Phone Firmware 9.70.0.100 - Phone Call Exploit Title: YeaLink IP Phone SIP-TxxP firmware garnelo.eu Vendor Homepage: http://yealink.com Software Link: http://yealink.com/productlist.aspx?BaseInfoCateId=147&CateId=147&ProductsCateID=147 Version: 9.70.0.100 and lower Tested on: YeaLink I...

Juniper Junos SIP DoS (PSN-2013-04-911)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When the SIP ALG feature is enabled, a specially crafted SIP packet can cause the flowd process to crash. A remote, unauthenticated attacker could exploit this to drop all existing networ...