Asterisk认证SIP响应用户名枚举漏洞

BUGTRAQ ID: 34353 CVECAN ID: CVE-2008-3903 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 如果启用了Digest认证的话，Asterisk PBX对登录期间所尝试的有效和无效SIP用户名会返回不同的响应，远程攻击者可以通过暴力猜测枚举出有效的用户名。 Asterisk Asterisk 1.6.0.x Asterisk Asterisk 1.4.x Asterisk Asterisk 1.2.x Asterisk Business Edition C.2.x.x Asterisk Business Edition...

Cracking SIP passwords with SIP Digest Leak

VoIP phones have taken off in both the enterprise and the consumer markets, thanks to their ease of deployment and low operating costs. But, as this video from Enablesecurity shows, there are a number of security risks that have yet to be addressed...

Asterisk VoIP server DoS

NULL pointer dereference on empty SIP INVITE header...

Fedora Update for speex FEDORA-2008-3191

Check for the Version of speex OpenVAS Vulnerability Test Fedora Update for speex FEDORA-2008-3191 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for speex FEDORA-2008-3103

Check for the Version of speex OpenVAS Vulnerability Test Fedora Update for speex FEDORA-2008-3103 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Microsoft Internet Explorer CSS Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

Polycom Soundpoint VoIP Phones Default Password (deprecated)

Binary data 4888.prm...

D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite

No description provided by source. D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. html form action="http://10.1.1.166/Forms/cbiSetSWUpdate?16640,0,0,0,0,0,0,0,0"...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 html form action="http://10.1.1.165/callwzd.html" method=post input name=DIRTYPAGE value=3 input name=HELPPAGE value=html.html input...

Zoom VoIP Phone Adapter XSRF Exploit

Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5...

D-Link VoIP Phone Adapter XSRF / XSS

D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be used for csrf bypass:...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery

Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 milw0rm.com 2009-01-29...

D-Link VoIP Phone Adapter - Cross-Site Scripting / Cross-Site Request Forgery Remote Firmware Overwrite

D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be used for csrf bypass:...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit

Exploit for hardware platform in category remote exploits ================================================== Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit ================================================== Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XS...

D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite

Exploit for hardware platform in category remote exploits ============================================================ D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite ============================================================ D-link VoIP Phone Adapter XSS and XSRFremote firmware...

D-Link VoIP Phone Adapter - Cross-Site Scripting Cross-Site Request Forgery Remote Firmware Overwrite

D-Link VoIP Phone Adapter - Cross-Site Scripting Cross-Site Request Forgery Remote Firmware Overwrite D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery

Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 milw0rm.com 2009-01-29...

Cisco SIP VoIP phones DoS

Crash on malformed RTP header parsing...

Asterisk IAX2认证响应信息泄露漏洞

BUGTRAQ ID: 33174 CVECAN ID: CVE-2009-0041 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk IAX2在认证期间对用户不存在的情况和错误口令的情况提供了不同的响应，这允许攻击者通过扫描主机确定特定的用户。 Asterisk Asterisk 1.6.x Asterisk Asterisk 1.4.x Asterisk Asterisk 1.2.x Asterisk Business Edition C.2.x.x Asterisk Business Edition C.1.x.x Asterisk...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...