3625 matches found
Asterisk PBX server voice mail mailbox directory traversal
Web interface directory traversal allows to download any .wav file...
Skype < 1.4.0.84 Multiple Remote Overflows (credentialed check)
The remote host is running Skype, a peer-to-peer, voice-over-IP software. The remote version of this software is vulnerable to a heap overflow in the handling of its data structures. An attacker can exploit this flaw by sending a specially crafted network packet to UDP or TCP ports Skype is...
Skype Detection
The remote host is running Skype, a peer-to-peer Voice-Over-IP application. Due to the peer-to-peer nature of Skype, any user connecting to the Skype network may consume a large amount of bandwidth. Make sure the use of this program is done in accordance with your corporate security policy. C...
Ventrilo Server Detection
The remote host is running Ventrilo, a voice over IP VoIP software developed by Flagship Industries. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid19717; scriptversion"1.17"; scriptcvsdate"Date: 2019/11/22"; name"english" = "Ventrilo Server Detection";...
CVE-2005-2181
Cisco 7940/7960 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...
CVE-2005-2181: Improper Verification of Cryptographic Signature
Cisco 7940/7960 Voice over IP VoIP phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message...
PT-2005-3110 · Cisco · Cisco 7940/7960
Name of the Vulnerable Software and Affected Versions: Cisco 7940/7960 Voice over IP VoIP phones affected versions not specified Description: The issue concerns the improper validation of certain values in a NOTIFY message, which can be exploited by remote attackers to spoof messages. This could...
CVE-2002-1934: Undefined Security Weakness
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information...
Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces
========================================================================== Title: Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces Vulnerability Discovery: FishNet Security - http://www.fishnetsecurity.com Date: 06/08/2005 Severity: Medium - Voice VLAN locally...
Cisco switches protected Voice VLANs protection bypass
Malformed CDP Cisco discovery protocol message opens access to voice VLAN from data VLAN...
CVE-2004-1759
Cisco voice products running the IBM Director Agent on IBM servers prior to OS 2000.2.6 are affected by CVE-2004-1759. The issue allows remote attackers to cause a denial of service (CPU consumption) by sending arbitrary packets to TCP port 14247, demonstrated via port scanning. The provided docu...
CVE-2004-1760
The CVE-2004-1760 entry covers unauthenticated remote admin access on Cisco voice products running the IBM Director Agent on IBM servers before OS 2000.2.6. The vulnerability allows an attacker to gain administrator privileges by connecting to TCP port 14247. The description specifies the affecte...
CVE-2004-1759
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service CPU consumption via arbitrary packets to TCP port 14247, as demonstrated using port scanning...
CVE-2004-1760
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247...
CVE-2004-1759: Undefined Security Weakness
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service CPU consumption via arbitrary packets to TCP port 14247, as demonstrated using port scanning...
CVE-2004-1760: Improper Authentication
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247...
CVE-2004-0315
Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long GET request on port 1080...
CVE-2002-0673
CVE-2002-0673 concerns Pingtel xpressa SIP phones (PX-1, software 1.2.5–1.2.7.4). The vulnerability enables attackers with physical access to log out the current user via the enrollment process and re-register the phone using MyPingtel Sign-In, gaining remote access and allowing unauthorized acti...
CVE-2002-0674
The CVE-2002-0674 entry concerns Pingtel xpressa SIP phones (software versions 1.2.5–1.2.7.4) that do not time out an inactive administrator session, potentially allowing another user to perform administrator actions if the original admin session isn’t explicitly ended. This mirrors the @stake ad...