93 matches found
CounterPath eyeBeam Handing SIP header Vulnerabilities
eyeBeam is a SIP softphone supporting open standards for VoIP, Video and Instant Messaging. There is a vunerability in it while handing SIP header with a large field name like this: INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK00001249z9hG4bK.00004119 From: 1249...
Buffer overflow
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
CVE-2006-0189
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
CVE-2006-0189
CVE-2006-0189 involves eStara SoftPhone. The vulnerability is a buffer overflow in SoftPhone versions 3.0.1.14 through 3.0.1.46 triggered by long SDP attributes (a=) inside SIP data carried over UDP port 5060. An unauthenticated remote attacker could potentially execute arbitrary code on the remo...
CVE-2006-0189
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow 2 !/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote "estara softphone" exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060...
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (1)
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow 1 / eStara Softphone buffer overflow exploit tested on : eStara Softphone 3.0.1.14 |||||| eStara Softphone 3.0.1.46 Vender website : http://www.estara.com/softphone/softph.exe Run this application, then use nc to send builded packet : nc -u...
eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Expl (2)
Exploit for unknown platform in category remote exploits ===================================================================== eStara Softphone = 3.0.1.46 SIP Remote Buffer Overflow Exploit 2 ===================================================================== !/usr/bin/perl -s damn-hippie.pl by...
eStara Softphone SIP stack Buffer Overflow Vulnerability
eStara Softphone is a SIP softphone. There exists a buffer overflow venerability in the SIP stack when a SIP packet with SDP data, and the data length of the attribute filed "a" large than 4021 bytes. By exploiting this buffer overflow, an attacker can potentially gain control of the return addre...
eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Exploit (2)
No description provided by source. !/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote "estara softphone" exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060 Lets face it, most user...
eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================================= eStara Softphone include unsigned char invite = 0x49, 0x4E, 0x56, 0x49, 0x54, 0x45, 0x20, 0x73, 0x69, 0x70, 0x3A, 0x61, 0x40, 0x31, 0x32, 0x37, 0x2E, 0x30, 0x2E, 0x30, 0x2E,...
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)
!/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote "estara softphone" exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060 Lets face it, most users wont know the difference between...
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (1)
/ eStara Softphone buffer overflow exploit tested on : eStara Softphone 3.0.1.14 |||||| eStara Softphone 3.0.1.46 Vender website : http://www.estara.com/softphone/softph.exe Run this application, then use nc to send builded packet : nc -u 127.0.0.1 5060 include unsigned char invite = 0x49, 0x4E,...