98 matches found
PT-2017-13249
Name of the Vulnerable Software and Affected Versions Asterisk versions 13.x through 13.17.0 Asterisk versions 14.x through 14.6.0 Description The issue arises from a carefully crafted tel URI in a From, To, or Contact header, which could cause Asterisk to crash. Recommendations For Asterisk...
Digium Asterisk Denial of Service Vulnerability (CNVD-2017-30817)
Digium Asterisk is a set of open source telephone exchange PBX system software from Digium, USA. The software supports voicemail , multi-party voice conferencing , interactive voice response IVR , etc. pjsip channel driver respjsip is one of the pjsip driver . A security vulnerability exists in t...
asterisk -- Remote Crash Vulerability in res_pjsip
The Asterisk project reports: A carefully crafted URI in a From, To or Contact header could cause Asterisk to crash...
CVE-2012-2588: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 From, 2 To, or 3 Subject header or 4 body in an SMTP e-mail message...
PT-2014-2252
Name of the Vulnerable Software and Affected Versions MailEnable Enterprise version 6.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parts of an SMTP e-mail messag...
CVE-2012-1008: Improper Input Validation
OfficeSIP Server 3.1 allows remote attackers to cause a denial of service daemon crash via a crafted To header in a SIP INVITE message...
PT-2012-3011
Name of the Vulnerable Software and Affected Versions OfficeSIP Server version 3.1 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending a crafted To header in a SIP INVITE message. Recommendations For OfficeSIP...
OfficeSIP Server 3.1 - Denial of Service
OfficeSIP Server 3.1 - Denial of Service Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461...
CVE-2010-2835
CVE-2010-2835 affects Cisco IOS Software (12.2–12.4, 15.0–15.1), Cisco IOS-XE 2.5.x/2.6.x before 2.6.1, and CUCM 6.x/7.x/8.x. The flaw resides in SIP processing where a crafted SIP REFER with an invalid Refer-To header can trigger a DoS, causing device reloads or voice-services outages. Fixed ver...
CVE-2010-2835: Undefined Security Weakness
Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.0 before 7.02asu3, 7.1su before 7.13bsu2, 7.1 before 7.15, and 8.0 before 8.01 allow remote attackers to cause a...
DEBIAN-CVE-2009-3727
Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error message...
CVE-2009-3727: Exposure of Sensitive Information to an Unauthorized Actor
Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error message...
CVE-2007-4753: Undefined Security Weakness
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service device hang via 1 an empty SIP message or 2 a SIP INVITE message with a malformed To header, different vectors than CVE-2007-4553...
[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using the TO Header
MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH9 Synopsis After sending a message where the TO URI field is crafted, the device looks functional but in fact does not respond to any event provoking...
CVE-2002-2214: Undefined Security Weakness
The phpifimapmimeheaderdecode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service crash via an e-mail header with a long "To" header...
security flaw
Buffer overflow in the imapfetchoverview function in the IMAP functionality phpimap.c in PHP before 4.3.3 allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long e-mail address in a 1 To or 2 From header...
CVE-1999-1220: Undefined Security Weakness
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header...