4531 matches found
CVE-2002-1934
CVE-2002-1934 affects Pingtel xpressa SIP-based VoIP phones version 1.2.5 through 2.0.1. The vulnerability leaks sensitive information during boot-up, allowing an attacker to obtain the MD5 hashes of the Admin password, the physical password, and other registration data. The available connected s...
CVE-2002-1934
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information...
Ethereal 0.10.10 - 'SIP' Protocol Dissector Remote Buffer Overflow
/ tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes: tested on Debian Sarge Linux maggot4 2.6.8-1-386 1 Mon Sep 13...
Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit
Exploit for linux platform in category remote exploits =============================================================== Ethereal include include include include include unsigned char sipheader = "\x4f\x50\x54\x49\x4f\x4e\x53\x20\x73\x69\x70\x3a\x68\x61\x63"...
Ethereal 0.10.10 - SIP Protocol Dissector Remote Buffer Overflow
Ethereal 0.10.10 - SIP Protocol Dissector Remote Buffer Overflow / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes:...
Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit
No description provided by source. / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes: tested on Debian Sarge Linux...
CVE-2004-1940
sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service crash via a STUN response packet with a large attrLen value that causes an out-of-bounds read...
[Full-disclosure] [SecurityLab] Ethereal 0.10.10 SIP Dissector Overflow
Advisory Name: Ethereal 0.10.10 SIP Dissector Overflow Release Date: 05/07/05 Application: Ethereal 0.10.10 and Prior Platform: Multiple Severity: A remote attacker can execute arbitrary commands Author: Ejovi Nuwere ejoviATsecuritylab.net Vendor Status: Vendor has published patch Reference:...
[SecurityLab] Ethereal 0.10.10 SIP Dissector Overflow
Advisory Name: Ethereal 0.10.10 SIP Dissector Overflow Release Date: 05/07/05 Application: Ethereal 0.10.10 and Prior Platform: Multiple Severity: A remote attacker can execute arbitrary commands Author: Ejovi Nuwere ejoviATsecuritylab.net Vendor Status: Vendor has published patch Reference:...
[NEWS] GNU oSIP URI Parsing Heap Overflows
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
GNU oSIP SIP voice protocol library buffer overflow
Heap overflow on URL parsing...
CVE-2003-1114
The Session Initiation Protocol SIP implementation in Mediatrix Telecom VoIP Access Devices and Gateways running SIPv2.4 and SIPv4.3 firmware allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip tes...
CVE-2003-1113
The Session Initiation Protocol SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...
CVE-2003-1114
The CVE-2003-1114 entry concerns Mediatrix Telecom SIP implementations on VoIP Access Devices and Gateways with SIPv2.4/SIPv4.3 firmware. A remote attacker can cause a denial of service or execute arbitrary code by sending crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip tests...
CVE-2003-1109
CVE-2003-1109 affects Cisco SIP implementations in IP Phone models 7940/7960, IOS 12.2 train, and Secure PIX 5.2.9–6.2.2. Crafted INVITE messages can cause denial of service and may allow arbitrary code execution, as demonstrated by the OUSPG PROTOS c07-sip test suite. Connected sources (Cisco ad...
CVE-2003-1108
CVE-2003-1108 affects the SIP implementation in Alcatel OmniPCX Enterprise 5.0 Lx. The issue allows remote attackers to cause a denial of service and potentially execute arbitrary code by sending crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite. Connected sources co...
CVE-2003-1109
The Session Initiation Protocol SIP implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages...
CVE-2003-1115
The Session Initiation Protocol SIP implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suit...
CVE-2003-1110
The CVE-2003-1110 issue affects the Columbia SIP User Agent (sipc) 1.74 and older builds prior to sipc 2.0 (build 2003-02-21). The vulnerability arises in its SIP Session Initiation Protocol handling, where crafted INVITE messages can cause a denial of service or allow execution of arbitrary code...
CVE-2003-1112
The CVE-2003-1112 entry applies to the SIP implementation in Ingate Firewall and Ingate SIParator prior to version 3.1.3. A crafted INVITE message can trigger denial of service and, possibly, remote code execution, as demonstrated by the OUSPG PROTOS c07-sip tests. Remediation: upgrade to version...