CVE-2008-3903

CVE-2008-3903 affects Asterisk and related builds (1.2.x, 1.4.x, 1.6.x, Asterisk Business Edition, s800i, Trixbox) where Digest authentication with authalwaysreject yields different SIP responses based on whether a username is valid, enabling remote username enumeration. Public advisories (Debian...

CVE-2008-2732

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

CVE-2008-2732

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

CVE-2008-2732

CVE-2008-2732 covers multiple erroneous SIP processing vulnerabilities in Cisco PIX and ASA (5500 series) that may cause device reloads via SIP inspection. Affected software versions include Cisco PIX/ASA releases prior to 7.0(7)16, 7.1 prior to 7.1(2)71, 7.2 prior to 7.2(4)7, 8.0 prior to 8.0(3)...

FreeBSD Ports: ethereal, ethereal-lite, tethereal, tethereal-lite

The remote host is missing an update to the system as announced in the referenced advisory. VID 74d06b67-d2cf-11d8-b479-02e0185c0b53 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Cisco PIX and Cisco ASA multiple security vulnerabilities

Multiple DoS conditions on SIP parsing and VPN authentication, memory leaks, information leak...

Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA Advisory ID: cisco-sa-20080903-asa Revision 1.0 For Public Release 2008 September 3 1600 UTC GMT...

Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2008-3777

The SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, writes account names and passwords to the 1 alarm and 2 system logs during failed login attempts, which allows local users to obtain login credentials by...

Code injection

The SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, writes account names and passwords to the 1 alarm and 2 system logs during failed login attempts, which allows local users to obtain login credentials by...

Cross site request forgery (csrf)

The remote management interface in SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service...

CVE-2008-3778

The remote management interface in SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service...

CVE-2008-3778

The remote management interface in SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service...

CVE-2008-3778

CVE-2008-3778 affects Avaya SIP Enablement Services (SES) Server 5.0 and Communication Manager 5.0 on the S8300C with SES enabled. The remote management interface can proceed with Core router updates even after an invalid login, enabling remote attackers to cause a messaging outage (DoS) or to ga...

CVE-2008-3777

CVE-2008-3777 affects Avaya SIP Enablement Services (SES) Server version 5.0 and Communications Manager (CM) 5.0 on the S8300C with SES enabled. The issue is that failed login attempts cause account names and passwords to be written to the alarm and system logs, allowing local users to read crede...

Asterisk PBX SDP Header Overflow Vulnerability

The remote Asterisk PBX SIP server is affected by an overflow vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Asterisk PBX NULL Pointer Dereference Overflow

Asterisk PBX is prone to a remote buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Asterisk PBX SIP Service Guest Access Enabled

Asterisk PBX SIP service guest access is enabled. Copyright C 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute...

Linux Kernel x86_64 ptrace Denial Of Service Vulnerability

Linux内核存在拒绝服务漏洞，当进程执行在64位的计算机时。 本地攻击者可以利用这个问题的崩溃和内核拒绝服务的合法用户。 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10...