44 matches found
ICQ buffer overflow
Buffer overflow on status message parsing...
Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling
source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The issue arises because the affected phones do not verify the 'Call-ID...
CVE-2003-0105
ServerMask 2.2 and earlier does not obfuscate 1 ETag, 2 HTTP Status Message, or 3 Allow HTTP responses, which could tell remote attackers that the web server is an IIS server...
CVE-2003-0105
CVE-2003-0105 applies to Port80 Software ServerMask (2.2 and earlier) and documents that the product does not obfuscate certain HTTP headers, enabling potential fingerprinting of IIS by observers. The CVE notes that ETag, HTTP status messages, and Allow responses can reveal the underlying web ser...