Asterisk protection bypass

ACL restrictions were not applied to SIP INVITE messages...

ZoIPer Empty Call-Info Denial of Service Vulnerability

ZoIPer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zoiper softphone DoS

Crash on SIP request parsing...

Digium Asterisk SIP Invalid Response Code Denial of Service (CVE-2007-1594)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

Cisco Unified Communications Manager / Cisco Unified Presence DoS

Multiple Denial of Service conditions on SIP and Skinny processing...

CVE-2009-3704

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service crash via a SIP INVITE request with an empty Call-Info header...

Cross site request forgery (csrf)

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service crash via a SIP INVITE request with an empty Call-Info header...

CVE-2009-3704

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service crash via a SIP INVITE request with an empty Call-Info header...

CVE-2009-3704

ZoIPer 2.22 (and possibly versions before 2.24, Library 5324) is vulnerable to a remote denial-of-service via a crafted SIP INVITE with an empty Call-Info header. The issue is an unauthenticated remote DoS that can crash the application. Remediation in the documents is to upgrade to version 2.24 ...

CVE-2009-2867

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service device reload via a crafted SIP transit packet, aka Bug ID CSCsr18691...

CVE-2009-2870

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCsx25880...

CVE-2009-2864

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

Code injection

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service device reload via a crafted SIP transit packet, aka Bug ID CSCsr18691...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

Code injection

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCsx25880...

CVE-2009-2864

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

CVE-2009-2864

Cisco Unified Communications Manager (CUCM) versions affected: 5.x before 5.1(3g); 6.x before 6.1(4); 7.0.x before 7.0(2a)su1; 7.1.x before 7.1(2). Root cause is a denial-of-service in the SIP handling that can crash/restart the CM process when processing crafted SIP messages. CVSS base score in ...

CVE-2009-2870

CVE-2009-2870 is a Cisco IOS DoS vulnerability triggered by processing crafted SIP messages when the Cisco Unified Border Element is enabled. Affected: Cisco IOS 12.2–12.4 with UBE/SIP enabled; impact is device reload (DoS). Root cause: DoS in SIP message handling (CSCsx25880). Exploitation is ne...

CVE-2009-2867

Cisco IOS Zone-Based Policy Firewall SIP inspection is affected by CVE-2009-2867 (Bug CSCsr18691). A crafted SIP transit packet can cause a denial of service resulting in a device reload on affected releases. The advisory specifies that only devices configured with SIP inspection in Zone-Based Po...

CVE-2009-2867

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service device reload via a crafted SIP transit packet, aka Bug ID CSCsr18691...