3237 matches found
CVE-2004-0315
Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long GET request on port 1080...
CVE-2002-0673
CVE-2002-0673 concerns Pingtel xpressa SIP phones (PX-1, software 1.2.5–1.2.7.4). The vulnerability enables attackers with physical access to log out the current user via the enrollment process and re-register the phone using MyPingtel Sign-In, gaining remote access and allowing unauthorized acti...
CVE-2002-0668
The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to modify the Call Forwarding settings and hijack calls...
CVE-2002-0672
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null...
CVE-2002-0674
The CVE-2002-0674 entry concerns Pingtel xpressa SIP phones (software versions 1.2.5–1.2.7.4) that do not time out an inactive administrator session, potentially allowing another user to perform administrator actions if the original admin session isn’t explicitly ended. This mirrors the @stake ad...
CVE-2004-0315
The CVE-2004-0315 entry concerns a buffer overflow in Avirt Voice 4.0 . A remote attacker can trigger a vulnerability by sending a long GET request on port 1080 , potentially causing a denial of service and, per the NVD entry, possibly execute arbitrary code . The issue is a network-facing vulner...
CVE-2004-0315
Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long GET request on port 1080...
Remote Buffer Overflow in Avirt Voice 4.0
Donato Ferrante Application: Avirt Voice http://www.avirt.com/ Version: 4.0 Bug: Remote Buffer Overflow Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3. The cod...
Voice Product Vulnerabilities on IBM Servers
...
CVE-2004-1760
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247...
CVE-2004-1759
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service CPU consumption via arbitrary packets to TCP port 14247, as demonstrated using port scanning...
Cisco Security Advisory: Vulnerabilities in H.323 Message Processing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in H.323 Message Processing Document ID: 47843 Revision 1.0 - INTERIM For Public Release 2004 January 13 UTC 1200 - -------------------------------------------------------------------------- Contents ========...
OptiSoft Blubster 2.5 - Remote Denial of Service
// source: https://www.securityfocus.com/bid/8482/info t has been reported that Blubster is prone to a remote denial of service vulnerability due to a port flooding attack on TCP port 701. The problem is reported to present itself when a remote attacker floods port 701 with voice chat session...
Yahoo! Voice Chat ActiveX Control 1.0.0.43 - Remote Buffer Overflow
Yahoo! Voice Chat ActiveX Control 1.0.0.43 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/7561/info It has been reported that the ActiveX control used by the Yahoo! Voice Chat feature is prone to an exploitable buffer overflow vulnerability. This issue can be exploited via a...
Yahoo! Voice Chat ActiveX Control 1.0.0.43 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/7561/info It has been reported that the ActiveX control used by the Yahoo! Voice Chat feature is prone to an exploitable buffer overflow vulnerability. This issue can be exploited via a malicious web page that calls the vulnerable control with malformed...
CVE-2002-0671
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing...
CERT Advisory CA-2003-06 Multiple vulnerabilities in implementations of the Session Initiation Protocol (SIP)
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-06 Multiple vulnerabilities in implementations of the Session Initiation Protocol SIP Original release date: February 21, 2003 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affect...
CVE-2002-1934
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information...
Important: Red Hat Security Advisory: : PXE server crashes from certain DHCP packets
Updated PXE packages are now available for Red Hat Linux which fix a vulnerability that can crash the PXE server using certain DHCP packets. The PXE package contains the PXE Preboot eXecution Environment server and code needed for Linux to boot from a boot disk image on a Linux PXE server. It was...