CVE-2007-4753

The CVE-2007-4753 family affects the Thomson ST 2030 SIP phone running software 1.52.1. It allows remote DoS (device hang) via SIP message parsing issues: (a) an empty SIP message and (b) a SIP INVITE with a malformed To header, with vectors distinct from CVE-2007-4553. Related CVE-2007-4553 desc...

Unfixed XSS vulnerability at www.suikast.de

Security researcher St@rExT, has submitted on 09/04/2007 a cross-site-scripting XSS vulnerability affecting www.suikast.de, which at the time of submission ranked 231406 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/04/2007. It is currentl...

Unfixed XSS vulnerability at www.fotograf.web.tr

Security researcher St@rExT, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.fotograf.web.tr, which at the time of submission ranked 122590 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...

Code injection

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via an INVITE message with a Via header that contains a '/' slash instead of the required space following the SIP version number...

CVE-2007-4553

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via an INVITE message with a Via header that contains a '/' slash instead of the required space following the SIP version number...

Thomson ST 2030 SIP phone DoS

Crash on invalid INVITE request Via: and To: headers and also on empty message...

CVE-2007-4553

CVE-2007-4553 affects Thomson ST 2030 SIP phone running software 1.52.1. The issue is a denial-of-service caused by processing a malformed SIP INVITE where the Via header contains a '/' in place of the required space after the SIP version number. This header parsing defect can cause the device to...

[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using the TO Header

MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH9 Synopsis After sending a message where the TO URI field is crafted, the device looks functional but in fact does not respond to any event provoking...

Thomson SIP phone ST 2030 Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================== Thomson SIP phone ST 2030 Remote Denial of Service Exploit ========================================================== !/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It...

Thomson SpeedTouch ST 2030 (SIP Phone) - Remote Denial of Service

!/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It provokes a DoS in the device. use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia: SIP/2.0/UDP...

Unfixed XSS vulnerability at www.hackhaber.com

Security researcher st@rext, has submitted on 23/08/2007 a cross-site-scripting XSS vulnerability affecting www.hackhaber.com, which at the time of submission ranked 716661 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/08/2007. It is...

Unfixed XSS vulnerability at mirrorhaber.org

Security researcher st@rext, has submitted on 23/08/2007 a cross-site-scripting XSS vulnerability affecting mirrorhaber.org, which at the time of submission ranked 1341149 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/08/2007. It is...

Unfixed XSS vulnerability at mirrorhaber.org

Security researcher st@rext, has submitted on 23/08/2007 a cross-site-scripting XSS vulnerability affecting mirrorhaber.org, which at the time of submission ranked 1341149 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/08/2007. It is...

Unfixed XSS vulnerability at service.govdelivery.com

Security researcher st@rext, has submitted on 22/08/2007 a cross-site-scripting XSS vulnerability affecting service.govdelivery.com, which at the time of submission ranked 159954 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/08/2007. It is...

Unfixed XSS vulnerability at www.gaffur-fan.net

Security researcher st@rext, has submitted on 22/08/2007 a cross-site-scripting XSS vulnerability affecting www.gaffur-fan.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/08/2007. It is currently...

Unfixed XSS vulnerability at vothuong.net

Security researcher st@rext, has submitted on 22/08/2007 a cross-site-scripting XSS vulnerability affecting vothuong.net, which at the time of submission ranked 269910 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/08/2007. It is currently...

Unfixed XSS vulnerability at gamerzone.com.br

Security researcher st@rext, has submitted on 22/08/2007 a cross-site-scripting XSS vulnerability affecting gamerzone.com.br, which at the time of submission ranked 202221 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/08/2007. It is...

Unfixed XSS vulnerability at livecs.org

Security researcher st@rext, has submitted on 22/08/2007 a cross-site-scripting XSS vulnerability affecting livecs.org, which at the time of submission ranked 5915068 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/08/2007. It is currently...

Unfixed XSS vulnerability at www.final4ever.com

Security researcher St@rExT, has submitted on 21/08/2007 a cross-site-scripting XSS vulnerability affecting www.final4ever.com, which at the time of submission ranked 17874 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Unfixed XSS vulnerability at www.findikkurdu.com

Security researcher St@rExT, has submitted on 21/08/2007 a cross-site-scripting XSS vulnerability affecting www.findikkurdu.com, which at the time of submission ranked 933223 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...