Swiss Coder Publicises Government Spy Trojan

A software engineer who created Trojans for the Swiss authorities to intercept Voice-over-IP VoIP phone calls has published the source code to his programs in order to draw attention to the surveillance threat posed by such software. Read the full story idg.no...

Code injection

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service disconnected calls and device reboot via a crafted SIP packet to UDP port 5060...

CVE-2008-7065

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service disconnected calls and device reboot via a crafted SIP packet to UDP port 5060...

CVE-2008-7065

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service disconnected calls and device reboot via a crafted SIP packet to UDP port 5060...

CVE-2008-7065

The CVE-2008-7065 entry describes a vulnerability in Siemens C450 IP and C475 IP VoIP devices where remote attackers can cause a denial of service by sending a crafted SIP packet to UDP port 5060. The impact reported is disconnected calls and device reboot . The core issue is triggered via crafte...

Snom VoIP/SIP Phone Bypass

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Snom VoIP/SIP Phones Snom300, Snom320, Snom360, Snom370, Snom820 Vendor: snom technology AG CVD ID: CVE-2009-1048 Subject: Authentication Bypass of Snom Phone Web Interface Risk: High Effect: Remote Author: Walter...

CVE-2009-1048

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a 1 http or ...

Authentication flaw

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a 1 http or ...

CVE-2009-1048

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a 1 http or ...

CVE-2009-1048

CVE-2009-1048 affects snom VoIP/SIP phones (models 300/320/360/370/820). The web interface can be accessed without authentication by sending an HTTP/HTTPS request with Host: 127.0.0.1, bypassing authentication and enabling reconfiguration or arbitrary use. Affected firmware versions are 6.5.x bef...

SNOM VoIP phones authentication bypass

Web interface access authentication bypass...

Authentication Bypass of Snom Phone Web Interface

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Snom VoIP/SIP Phones Snom300, Snom320, Snom360, Snom370, Snom820 Vendor: snom technology AG CVD ID: CVE-2009-1048 Subject: Authentication Bypass of Snom Phone Web Interface Risk: High Effect: Remote Author: Walter...

CVE-2009-2547

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

Integer overflow

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

CVE-2009-2547

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

CVE-2009-2547

CVE-2009-2547 describes an integer underflow in ArmA (Armed Assault) up to version 1.14 and earlier, and ArmA 1.16 beta, and ArmA II up to version 1.02 and earlier. A remote attacker can send a VoIP over Network (VON) packet to port 2305 with a negative packet_size value, triggering a buffer over...

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)

!/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploits found with this code can be found at http://www.securityscraper.com/ Released under the VoIPER project Do not hesitate to show enthusiasm and support and help develop this further. use strict; use IO::Socket; use...

VOIP Dashboard SQL Injection

--------------------------------------------------------------------------------------------- + VOIP Dashboard Auth BypassSQL Injection vulnerability + Found By: Rohit Bansal SCHAP Security http://schap.org + Date: 02-06-2009...

Asterisk VoIP server user accounts enumeration

Different replies for non-exstant SIP account and invalid password...

Unsniff Network Analyzer 1.0 - 'usnf' Local Heap Overflow (PoC)

!/usr/bin/perl Unsniff Network Analyzer 1.0 usnf Local Heap Overflow PoC Summary: Dont just look at hex dumps and protocol trees. With Unsniff Network Analyzer, you can view network traffic at various levels of detail. View high level objects like images, video, HTML pages, VOIP calls, drill down...