CVE-2013-1145

CVE-2013-1145 affects Cisco IOS Software with Zone-Based Policy Firewall SIP application layer gateway inspection enabled. A memory leak in the SIP inspection path can be triggered by malformed SIP messages, leading to denial of service via memory exhaustion or device reload. Affected Cisco IOS r...

Cisco IOS Software Network Address Translation Denial of Service Vulnerability

Cisco IOS Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a reload of a vulnerable device. The vulnerability is due to improper translation of valid Session Initiation Protocol SIP packets across a Network Address Translation NAT boundary. An attack...

Cisco IOS Software Zone-Based Policy Firewall Session Initiation Protocol Inspection Denial of Service Vulnerability

Cisco IOS Software contains a memory leak vulnerability that could be triggered through the processing of malformed Session Initiation Protocol SIP messages. Exploitation of this vulnerability could cause an interruption of services. Only devices that are configured for SIP inspection are affecte...

Konftel 300IP 2.1.2 Reboot Bypass

!/bin/bash Konftel 300IP SIP-based Conference phone = 2.1.2 remote bypass reboot exploit by Todor Donev / 03.2013 / Sofia,Bulgaria email: todor dot donev at gmail com type: hardware The Konftel 300IP is a flexible SIP-based conference phone, perfect for companies that use IP voice services. Its...

asterisk -- multiple vulnerabilities

Asterisk project reports: Buffer Overflow Exploit Through SIP SDP Header Username disclosure in SIP channel driver Denial of Service in HTTP server...

T-Mobile Fixes Man-in-the-Middle Vulnerability in Wi-Fi Calling App

UPDATE: The default “Wi-Fi Calling” feature on T-Mobile devices that lets milllions of Android users make phone calls over a wireless Internet connection contained a vulnerability that could have been exploited to perform man-in-the-middle MiTM attacks. Graduate students Jethro Beekman and...

Digium Asterisk SIP Channel Driver Denial Of Service - High Confidence (CVE-2011-4063)

A denial of service vulnerability has been reported in Digium Asterisk. The vulnerability is due to an error in Asterisk's SIP channel driver while handling malformed REGISTER requests. A remote attacker may exploit this vulnerability by sending a specially crafted REGISTER request to an affected...

libosip2 / SIP Witch DoS

NULL pointer dereference...

SIP Witch 0.7.4 w/libosip2-4.0.0 DoS via NULL pointer derefence in libosip2

SIP Witch 0.7.4 w/libosip2-4.0.0 Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 DoS by the NULL pointer derefence in libosip2. True, found in the ancient version of sipwitch default in BT5 but the problem lies in the library used by it and may...

SIP Witch 0.7.4 Denial Of Service

SIP Witch 0.7.4 w/libosip2-4.0.0 Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 DoS by the NULL pointer derefence in libosip2. True, found in the ancient version of sipwitch default in BT5 but the problem lies in the library used by it and may...

Fedora Update for ekiga FEDORA-2013-2998

Check for the Version of ekiga OpenVAS Vulnerability Test Fedora Update for ekiga FEDORA-2013-2998 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for ekiga FEDORA-2013-2890

Check for the Version of ekiga OpenVAS Vulnerability Test Fedora Update for ekiga FEDORA-2013-2890 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora 18 : ekiga-4.0.1-1.fc18 / opal-3.10.10-1.fc18 / ptlib-2.10.10-1.fc18 (2013-2998)

New upstream ekiga 4.0.1 release - Core fixes - Fix crash when quitting ekiga while receiving presence information - Fix crash when quitting ekiga right after starting it before STUN ending - Fix crash when disabling an account while icons in roster are changing - Fix crash when receiving call a...

[SECURITY] Fedora 17 Update: ekiga-4.0.1-1.fc17

Ekiga is a tool to communicate with video and audio over the internet. It uses the standard SIP and H323 protocols...

[SECURITY] Fedora 18 Update: ekiga-4.0.1-1.fc18

Ekiga is a tool to communicate with video and audio over the internet. It uses the standard SIP and H323 protocols...

Oracle Java SE CVE-2013-1493 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the application. This vulnerability affects the following supported versions: JDK and JRE 7 Update 15 and prior JDK and JRE 6 Update 41 and...

CVE-2013-1137

Cisco Unified Presence Server CUPS 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service CPU consumption via crafted packets to the SIP TCP port, aka Bug ID CSCua89930...

Command injection

Cisco Unified Presence Server CUPS 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service CPU consumption via crafted packets to the SIP TCP port, aka Bug ID CSCua89930...

CVE-2013-1137

CVE-2013-1137 affects Cisco Unified Presence Server (CUPS) versions 8.6, 9.0 and 9.1 before 9.1.1. The vulnerability allows remote, unauthenticated attackers to cause a denial of service via crafted packets sent to the SIP TCP port (TCP 5060), consuming CPU resources. Root cause is a DoS conditio...

SuSE 11.2 Security Update : wireshark (SAT Patch Number 7317)

wireshark was updated to 1.8.5 bnc801131, fixing bugs and security issues : The following vulnerabilities have been fixed : - Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01...