Cisco IP Phone 7940 (10 SIP messages) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl use IO::Socket::INET; die "Usage $0 dst-address dst-port dstusername src-address" unless $ARGV3; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; ...

Cisco IP Phone 7940 (3 SIP messages) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl use IO::Socket::INET; die "Usage $0 dst port username" unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; ...

cisco-dos.txt

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 3 February, 2007 ID: KIPH5 Synopsis After sending a series of three SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in March 2007 and...

Cisco IP Phone 7940 - 3 SIP Messages Remote Denial of Service

Cisco IP Phone 7940 - 3 SIP Messages Remote Denial of Service !/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia:...

Cisco IP Phone 7940 - 3 SIP Messages Remote Denial of Service

!/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia: SIP/2.0/UDP\t192.168.1.2;rport;branch=00\r\nFrom: ;tag=00\r\nTo: ;tag=00\r\nCall-ID:...

Cisco IP Phone 7940 - 10 SIP Messages Remote Denial of Service

!/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV3; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia: SIP/2.0/UDP $ARGV3;branch=01;rport\r\nFrom: ;tag=01\r\nTo: \r\nCall-ID: 01@$ARGV3\r\nCSeq: 7532...

[Full-disclosure] 3 messsages attack remote DOS on Cisco 7940

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 3 February, 2007 ID: KIPH5 Synopsis After sending a series of three SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in March 2007 and...

Cisco 7940 SIP IPPhones DoS

A sequence of malformed SIP requests causes device to crash...

Cisco IP Phone 7940 - 10 SIP Messages Remote Denial of Service

Cisco IP Phone 7940 - 10 SIP Messages Remote Denial of Service !/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV3; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia: SIP/2.0/UDP...

cisco-stateful-dos.txt

MADYNES Security Advisory : stateful SIP remote DOS on Cisco 7940 Date of Discovery 4 April, 2007 ID: KIPH6 Synopsis After sending a series of ten SIP messages the device reboots. The phone does not check properly the state engine in the SIP stack The vendor was informed in April 2007 and...

Type confusion

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4382

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4382

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4382

CVE-2007-4382 affects CounterPath X-Lite 3.0 34025 and possibly eyeBeam, where a SIP INVITE message lacking a Content-Type header can cause a device crash (remote denial of service). The available documents confirm the vulnerable component and the attack vector (SIP INVITE without Content-Type) a...

CVE-2007-4366

WengoPhone 2.1 allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4366

WengoPhone 2.1 allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

Type confusion

WengoPhone 2.1 allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4366

WengoPhone 2.1 allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4366

CVE-2007-4366 affects WengoPhone 2.1. It allows remote attackers to cause a denial of service (device crash) by sending a SIP INVITE message lacking a Content-Type header. The available documents confirm the affected product/version and the root cause (malformed SIP INVITE), with the impact descr...

WengoPhone SIP Soft Phone畸形报文拒绝服务漏洞

WengoPhone SIP Soft Phone是一款基于SIP的VoIP电话程序。 WengoPhone SIP Soft Phone实现存在消息验证检查问题，远程攻击者可以利用漏洞进行拒绝服务攻击，使应用程序崩溃。 问题是存在于SIP客户端组件不正确处理SIP报文，MESSAGE处理没有"Content-Type"字段的畸形报文可导致应用程序崩溃。 Wengo WengoPhone 2.1 目前没有解决方案提供： http://www.wengophone.com/ /main.cpp/ include stdio.h include string using namespace...