DEBIAN-CVE-2006-5445

Unspecified vulnerability in the SIP channel driver channels/chansip.c in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service resource consumption via unspecified vectors that result in the creation of "a real pvt structure" that uses mor...

CVE-2006-5445

Unspecified vulnerability in the SIP channel driver channels/chansip.c in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service resource consumption via unspecified vectors that result in the creation of "a real pvt structure" that uses mor...

CVE-2006-5445

Unspecified vulnerability in the SIP channel driver channels/chansip.c in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service resource consumption via unspecified vectors that result in the creation of "a real pvt structure" that uses mor...

CVE-2006-5445

Summary: CVE-2006-5445 affects the SIP channel driver (channels/chan_sip.c) in Asterisk. Affected versions are Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3. Impact: remote attackers can cause a denial of service through resource consumption by triggering creation of a real pvt struct...

CVE-2006-5445

Unspecified vulnerability in the SIP channel driver channels/chansip.c in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service resource consumption via unspecified vectors that result in the creation of "a real pvt structure" that uses mor...

Debian DSA-1062-1 : kphone - insecure file creation

Sven Dreyer discovered that KPhone, a Voice over IP client for KDE, creates a configuration file world-readable, which could leak sensitive information like SIP passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

SIP Server Detection

Binary data 3767.prm...

SIP Server Detection

Binary data 3763.prm...

SIP Client Detection

Binary data 3762.prm...

Cisco SIP TFTP Server Detection

Binary data 3764.prm...

CVE-2006-5038

The CVE-2006-5038 entry documents a vulnerability in the FiWin SS28S WiFi VoIP SIP/Skype Phone running firmware 01_02_07, where a hard-coded username and password enables remote administrative access via Telnet. This is a network-accessible issue with partial confidentiality, integrity, and avail...

CVE-2006-5038

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

SIP over TLS: X.509 peer authentication vulnerability in Ingate products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SIP over TLS: X.509 peer authentication vulnerability in Ingate products ======================================================================== Product: Ingate Firewall and Ingate SIParator Versions: all current versions Tracking ID: 2829 Summary...

CVE-2006-4194

CVE-2006-4032 (Cisco IOS CME) and CVE-2006-4194 involve an unspecified vulnerability in Cisco products (CME and PIX 500) where remote attackers can access sensitive information (e.g., SIP user directory usernames) through SIP-related messages or fixups. The description notes the vendor could not ...

CVE-2006-4194

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol SIP fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working...

CVE-2006-4032

Unspecified vulnerability in Cisco IOS CallManager Express CME allows remote attackers to gain sensitive information user names from the Session Initiation Protocol SIP user directory via certain SIP messages, aka bug CSCse92417...

CVE-2006-4032

Unspecified vulnerability in Cisco IOS CallManager Express CME allows remote attackers to gain sensitive information user names from the Session Initiation Protocol SIP user directory via certain SIP messages, aka bug CSCse92417...

CVE-2006-4029

Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...

CVE-2006-4029

Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...

CVE-2006-4029

AGEphone 1.24 and 1.38.1 are affected by a stack-based buffer overflow in sipd.dll that can be triggered by a crafted UDP SIP packet. This vulnerability allows remote attackers to execute arbitrary code. Affected component: sipd.dll within AGEphone. Root cause: stack-based overflow in the SIP pac...