EUVD-2007-4734

Malware in sbrugna...

Code injection

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via 1 an empty SIP message or 2 a SIP INVITE message with a malformed To header, different vectors than CVE-2007-4553...

CVE-2007-4753

The CVE-2007-4753 family affects the Thomson ST 2030 SIP phone running software 1.52.1. It allows remote DoS (device hang) via SIP message parsing issues: (a) an empty SIP message and (b) a SIP INVITE with a malformed To header, with vectors distinct from CVE-2007-4553. Related CVE-2007-4553 desc...

Code injection

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via an INVITE message with a Via header that contains a '/' slash instead of the required space following the SIP version number...

CVE-2007-4553

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via an INVITE message with a Via header that contains a '/' slash instead of the required space following the SIP version number...

Thomson ST 2030 SIP phone DoS

Crash on invalid INVITE request Via: and To: headers and also on empty message...

CVE-2007-4553

CVE-2007-4553 affects Thomson ST 2030 SIP phone running software 1.52.1. The issue is a denial-of-service caused by processing a malformed SIP INVITE where the Via header contains a '/' in place of the required space after the SIP version number. This header parsing defect can cause the device to...

Thomson SIP phone ST 2030 Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================== Thomson SIP phone ST 2030 Remote Denial of Service Exploit ========================================================== !/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It...

Thomson SpeedTouch ST 2030 (SIP Phone) - Remote Denial of Service

!/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It provokes a DoS in the device. use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia: SIP/2.0/UDP...

[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using the TO Header

MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH9 Synopsis After sending a message where the TO URI field is crafted, the device looks functional but in fact does not respond to any event provoking...