CVE-2008-0526

Cisco Unified IP Phone devices running SCCP or SIP firmware (models 7940/7940G/7960/7960G, and related variants) are affected by CVE-2008-0526, a vulnerability that allows remote attackers to reboot the phone via a large ICMP echo (ping) request. The issue is reported in Cisco advisories and vuln...

CVE-2008-0530

CVE-2008-0530 describes a buffer overflow in Cisco Unified IP Phone models 7940/7940G/7960/7960G running SCCP/SIP firmware. A specially crafted DNS response can overflow a buffer and allow remote code execution on vulnerable phones. Cisco reports fixes: DNS Response Parsing overflow resolved in S...

CVE-2008-0529

CVE-2008-0529 describes a buffer overflow vulnerability in the telnet server of Cisco Unified IP Phone models (7906G, 7911G, 7941G, 7961G, 7970G, 7971G) running SCCP/SIP firmware. The flaw can allow a remote authenticated attacker to trigger a overflow and execute arbitrary code via a crafted com...

CVE-2008-0527

Cisco Unified IP Phone 7935/7936 (SCCP firmware) HTTP server DoS vulnerability (CVE-2008-0527) allows remote reboot via crafted HTTP requests. Impact: device restarts, potentially service disruption. Root cause: internal HTTP server handling at TCP port 80 leads to denial of service. Affected pro...

CVE-2008-0531

Cisco Unified IP Phone (7940/7940G/7960/7960G) running SIP firmware is affected by CVE-2008-0531 due to a heap overflow in the handling of SIP challenge/response messages, potentially allowing an attacker-controlled SIP proxy or MITM to trigger arbitrary code execution on a vulnerable device. Thi...

CVE-2008-0528

CVE-2008-0528 concerns Cisco Unified IP Phone models 7940/7940G/7960/7960G with SIP firmware. A buffer overflow occurs in the handling of SIP MIME boundary data, allowing a remote attacker to potentially execute arbitrary code via a crafted SIP message. Cisco’s advisory fixes SIP MIME boundary ov...