eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service

eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to...

eStara SIP softphone several message-processing vulnerabilities

Visit http://www.nosec.org for more infomation SIP is the important protocol in VOIP, and I think it'll improve fast and fast in the future just like the TCP/IP. In that time, we can contact each other by VOIP for vedio and sound very cheaply. As a new protocol, most vendor just consider the usab...

eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service

source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP...

eStara SoftPhone 3.0.1 SIP Packet - Multiple Malformed Field Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. For the negative 'Expires' field issue: OPTIONS sip:[email protected] SIP/2.0 Via...

Buffer overflow

Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...

CVE-2006-0359

Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...

CVE-2006-0360

MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...

CVE-2006-0360

The CVE-2006-0360 entry affects the MPM SIP HP-180W Wireless IP Phone WE.00.17. An unauthenticated remote access path exists via UDP port 9090 (undocumented), enabling potential exposure of sensitive information and a possible denial of service. The description specifies no authentication require...

CVE-2006-0359

CVE-2006-0359 affects CounterPath eyeBeam SIP Softphone. The vulnerability is a buffer overflow in the SIP stack that allows remote attackers to cause a denial of service either at startup or during a call by sending SIP INVITE requests with a long header field name. The connected sources corrobo...

CVE-2006-0359

Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...

CVE-2006-0360

MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...

CounterPath eyeBeam Handing SIP header Vulnerabilities

eyeBeam is a SIP softphone supporting open standards for VoIP, Video and Instant Messaging. There is a vunerability in it while handing SIP header with a large field name like this: INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK00001249z9hG4bK.00004119 From: 1249...

CounterPath eyeBeam software SIP IP Phone DoS

Buffer overflow on oversized SIP packet header name...

CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (2)

CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/16253/info A remote buffer-overflow vulnerability affects CounterPath eyeBeam because the application fails to properly validate the length of user-supplied strings prior to...

CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/16253/info A remote buffer-overflow vulnerability affects CounterPath eyeBeam because the application fails to properly validate the length of user-supplied strings prior to copying them into static process buffers. An attacker may exploit this issue t...

CVE-2006-0189

Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...

Buffer overflow

Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...

CVE-2006-0189

CVE-2006-0189 involves eStara SoftPhone. The vulnerability is a buffer overflow in SoftPhone versions 3.0.1.14 through 3.0.1.46 triggered by long SDP attributes (a=) inside SIP data carried over UDP port 5060. An unauthenticated remote attacker could potentially execute arbitrary code on the remo...

CVE-2006-0189

Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...

eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= eStara Softphone include unsigned char invite = 0x49, 0x4E, 0x56, 0x49, 0x54, 0x45, 0x20, 0x73, 0x69, 0x70, 0x3A, 0x61, 0x40, 0x31, 0x32, 0x37, 0x2E, 0x30, 0x2E, 0x30, 0x2E,...