Nortel Telephony Server Denial of Service

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: Telephony Server Vendor: Nortel Subject: Telephony Server Denial of Service Risk: High Effect: Currently exploitable Author: Cyrill Brunschwiler cyrill.brunschwiler at csnc dot ch Date: October, 18th 2007 Introduction: ------------- A malicio...

Code injection

The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service telephony application outage...

Asterisk SIP Channel T.38 SDP Parsing Multiple Buffer Overflows

The version of Asterisk running on the remote host contains two stack-based buffer overflows in its SIP SDP handler when attempting to read the 'T38FaxRateManagement:' and 'T38FaxUdpEC:' options in the SDP within a SIP packet. An unauthenticated, remote attacker may be able to leverage this flaw ...

Windows Telephony API buffer overflow

Added: 06/12/2007 CVE: CVE-2005-0058 BID: 14518 OSVDB: 18606 Background The Windows Telephony API TAPI provides telecommunications support for Windows applications. Problem A buffer overflow in the Windows Telephony API allows local attackers to execute commands with administrative privileges...

Windows Telephony API buffer overflow

Added: 06/12/2007 CVE: CVE-2005-0058 BID: 14518 OSVDB: 18606 Background The Windows Telephony API TAPI provides telecommunications support for Windows applications. Problem A buffer overflow in the Windows Telephony API allows local attackers to execute commands with administrative privileges...

Windows Telephony API buffer overflow

Added: 06/12/2007 CVE: CVE-2005-0058 BID: 14518 OSVDB: 18606 Background The Windows Telephony API TAPI provides telecommunications support for Windows applications. Problem A buffer overflow in the Windows Telephony API allows local attackers to execute commands with administrative privileges...

Windows Telephony API buffer overflow

Added: 06/12/2007 CVE: CVE-2005-0058 BID: 14518 OSVDB: 18606 Background The Windows Telephony API TAPI provides telecommunications support for Windows applications. Problem A buffer overflow in the Windows Telephony API allows local attackers to execute commands with administrative privileges...

Code injection

The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...

Cisco IP telephony routers DoS

SIP packet UDP/5060 to device with vois over IP support, but not configured for SIP causes device to crash...

Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow

The chanskinny channel driver included in the version of Asterisk running on the remote host does not properly validate the length header in incoming packets. An unauthenticated, remote attacker may be able to leverage this flaw to execute code on the affected host subject to the privileges under...

Debian DSA-1126-1 : asterisk - buffer overflow

A problem has been discovered in the IAX2 channel driver of Asterisk, an Open Source Private Branch Exchange and telephony toolkit, which may allow a remote attacker to cause a crash of the Asterisk server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

Linksys RT31P2 SIP DoS

IP telephony hangs on invalid SIP message...

Inter-Asterisk eXchange Protocol Detection

The remote system is running a server that speaks the Inter-Asterisk eXchange Protocol. Description : The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP Telephony clients/servers to enable voice communication between them. SPDX-FileCopyrightText: 2006 Ferdy...

Inter-Asterisk eXchange Protocol Detection

The remote system is running a server that speaks the Inter-Asterisk eXchange Protocol. Description : The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP Telephony clients/servers to enable voice communication between them. OpenVAS Vulnerability Test $Id:...

Microsoft Windows - Telephony Service Command Execution (MS05-040)

Microsoft Windows - Telephony Service Command Execution MS05-040 // by Cesar Cerrudo - Argeniss - www.argeniss.com // // TAPI Vulnerability- MS05-040 // // Should work on Win2k sp0,sp1,sp2,sp3,sp4 any language // If Telephony Service is not running you can start it by net start "Telephony Service...

Microsoft Windows - Telephony Service Command Execution (MS05-040)

// by Cesar Cerrudo - Argeniss - www.argeniss.com // // TAPI Vulnerability- MS05-040 // // Should work on Win2k sp0,sp1,sp2,sp3,sp4 any language // If Telephony Service is not running you can start it by net start "Telephony Service" include "windows.h" include "stdio.h" include "tapi.h" typedef...

MS Windows Telephony Service Command Execution Exploit (MS05-040)

Exploit for unknown platform in category local exploits ================================================================= MS Windows Telephony Service Command Execution Exploit MS05-040 ================================================================= // by Cesar Cerrudo - Argeniss -...

Microsoft Excel Malformed Description Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. This issue may be triggered when an Excel document with malformed description data is opened. Technologies Affected Avaya Modular Messaging MAS 3.0.0 Microsoft Excel 2000 Microsoft Excel 2000 SP2 Microsoft Excel 2000 S...

WorldMail-3.0.pl.txt

Eudora WorldMail 3.0 Windows 2000 Remote System Exploit November 2005 Tested on Windows 2000 Server SP4 infoATcom-winner.com http://www.com-winner.com http://www.com-winner.com/CWCOM/cwc-index/ use IO::Socket::INET; use strict; win32bind - EXITFUNC=seh LPORT=4444 Size=344 Encoder=PexFnstenvSub...

Inter-Asterisk eXchange Protocol Detection

The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP telephony clients/servers to enable voice communication between them. Script Written By Ferdy Riphagen Script distributed under the GNU GPLv2 License. include"compat.inc"; if description scriptid20834;...