Exim SPA Authentication Buffer Overflow (CVE-2005-0022)

The Exim mail server is a full featured mail transfer agent MTA. It offers the user several optional authentication mechanisms, one of which is Secure Password Authentication SPA. Secure Password Authentication is also known as NTML authentication, which is commonly used by Windows-based software...

Gentoo Security Advisory GLSA 200501-23 (exim)

The remote host is missing updates announced in advisory GLSA 200501-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200501-23 (exim)

The remote host is missing updates announced in advisory GLSA 200501-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2551

The DownloaderActiveX Control DownloaderActiveX.ocx in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."...

Code injection

The DownloaderActiveX Control DownloaderActiveX.ocx in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."...

CVE-2008-2551

CVE-2008-2551 – Icona SpA C6 Messenger DownloaderActiveX control : The DownloaderActiveX.ocx in C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in propDownloadUrl when propPostDownloadAction is set to “run.” This is a remote code execu...

CVE-2008-2092

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: the severity of this issue has been disputed since there are limited attack scenarios...

Code injection

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: the severity of this issue has been disputed since there are limited attack scenarios...

CVE-2008-2092

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: the severity of this issue has been disputed since there are limited attack scenarios...

CVE-2008-2092

The CVE-2008-2092 issue affects the Linksys SPA-2102 Phone Adapter with firmware 3.3.6, where a remote attacker can cause a denial-of-service (crash) by sending a long ping packet (ping of death) over the network. The available records state this is a network-facing flaw with high impact (CVSS v2...

Linksys SPA-2102 wireless IP phones DoS

Large ICMP packets cause device to crash...

Linksys phone adapter denial of service

Linksys phone adapter denial of service Product Information Product Name: SPA-2102 Serial Number: FM500G582390 Software Version: 3.3.6 Hardware Version: 1.2.5a Another device hit with the PoD! ping -l 65500 192.168.0.1 Only seems to work on the internal network. discovered by sipher...

Linksys SPA-2102 Phone Adapter Packet Handling - Denial of Service

Linksys SPA-2102 Phone Adapter Packet Handling - Denial of Service source: https://www.securityfocus.com/bid/28414/info Linksys SPA-2102 Phone Adapter is prone to a denial-of-service vulnerability when handling multiple packets in quick succession. Attackers can exploit this issue to deny access ...

Linksys SPA-2102 Phone Adapter Packet Handling - Denial of Service

source: https://www.securityfocus.com/bid/28414/info Linksys SPA-2102 Phone Adapter is prone to a denial-of-service vulnerability when handling multiple packets in quick succession. Attackers can exploit this issue to deny access to the device's control center for legitimate users. Reports indica...

sip-pwn.txt

SIP, the IETF endorsed VoIP signaling protocol, is currently used to establish and manage VoIP calls. Many security issues have been addressed until know about the security of VoIP due to the large numbers of attacks coming from the traditional IP networks, but none have addressed the securing th...

Linksys SPA-941 phones crossite scripting

Crossite scripting throught web interface with SIP requests...

CVE-2006-7121

The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service reboot via 1 a long URL, or a long 2 username or 3 password during Basic Authentication...

CVE-2006-0449

Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers to cause a denial of service infinite loop by sending an APPEND command and disconnecting before the expected amount of data is sent...

CVE-2006-0447

Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the 1 AUTH PLAIN or 2 AUTH LOGIN SMTP commands, which is not properly handled by a EPSTRS.EXE or b SPA-RS.EXE; 3 a long username in the APOP...

Buffer overflow

Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the 1 AUTH PLAIN or 2 AUTH LOGIN SMTP commands, which is not properly handled by a EPSTRS.EXE or b SPA-RS.EXE; 3 a long username in the APOP...