CVE-2009-0629

Cisco IOS DLSw feature (12.2, 12.3, 12.4, 15.0, 15.1) is affected by a DoS via a sequence of malformed packets exploiting a narrow timing window (Bug ID CSCtf74999). The related Red Hat/NVD entries describe that this vulnerability can cause device crashes or reloads. Mitigation details are not pr...

CVE-2009-0629: Undefined Security Weakness

The 1 Airline Product Set aka ALPS, 2 Serial Tunnel Code aka STUN, 3 Block Serial Tunnel Code aka BSTUN, 4 Native Client Interface Architecture NCIA support, 5 Data-link switching aka DLSw, 6 Remote Source-Route Bridging RSRB, 7 Point to Point Tunneling Protocol PPTP, 8 X.25 for Record Boundary...

Asterisk多个远程拒绝服务漏洞

BUGTRAQ ID: 24950 CVECAN ID: CVE-2007-3763,CVE-2007-3764,CVE-2007-3765 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk...

Asterisk VoIP server multiple security vulnerabilities

Buffer overflow and DoS on IAX2 implementation, DoS in Skinny and STUN implementation...

ASA-2007-017: Remote Crash Vulnerability in STUN implementation

Asterisk Project Security Advisory - ASA-2007-017 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote Crash Vulnerability in STUN implementation |...

CVE-2007-3765

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...

Code injection

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...

CVE-2007-3765

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...

CVE-2007-3765

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...

DEBIAN-CVE-2007-3765

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...

CVE-2007-3765

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...

CVE-2007-3765

The CVE-2007-3765 entry corresponds to a remote crash vulnerability in Asterisk’s STUN implementation. Affected are Asterisk Open Source 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2. The flaw arises when parsing inbound STUN attributes...

CVE-2007-3765

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...

CVE-2007-3765: Undefined Security Weakness

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...

Detect STUN Server

A VPN server is listening on the remote port. Description : The remote host is running a STUN Simple Traversal of User Datagram Protocol - RFC 3489 server. Simple Traversal of User Datagram Protocol UDP Through Network Address Translators NATs STUN is a lightweight protocol that allows applicatio...

CVE-2004-1940

KPhone’s sipclient.cpp (versions 4.0.1 and earlier) is affected by a vulnerability where a STUN response with a large attrLen value triggers an out-of-bounds read, leading to remote denial of service (crash). The issue is disclosed across CVE-2004-1940 entries (NVD, CVE list, PT-2004-2837), consi...

CVE-2004-1940

sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service crash via a STUN response packet with a large attrLen value that causes an out-of-bounds read...

CVE-2004-1940: Out-of-bounds Read

sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service crash via a STUN response packet with a large attrLen value that causes an out-of-bounds read...

CVE-2004-1940

sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service crash via a STUN response packet with a large attrLen value that causes an out-of-bounds read...

PT-2004-2837 · Kphone · Kphone

Name of the Vulnerable Software and Affected Versions: KPhone versions 4.0.1 and earlier Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a STUN response packet with a large attrLen value. This large value causes an out-of-bounds read...