VoIPshield Systems
VoIPshield Labs

Vulnerability advisories

VoIPshield Systems stopped publishing new vulnerabilities as of November 2008. The original PHP research archive has been restored from snapshots on or before 5 March 2016.

SeverityTitleVendorProductReleasedID
HighNortel Multimedia Communications Server 5100 Call Spoofing and RedirectionNortelMultimedia Communications Server 5100 3.x2008-10-08VSRNT-2008-010
CriticalCS1000 Multiple Hardcoded PasswordsNortelCommunications Server 1000 4.50.x2008-04-01VSRNT-2008-003
HighSES SIP SQL InjectionAvayaCommunication Manager 3.1.x, Communication Manager 4.x2008-04-01VSRAV-2008-002
HighSES SIP SQL Denial of ServiceAvayaCommunication Manager 3.1.x, Communication Manager 4.x2008-04-01VSRAV-2008-002
CriticalSES SIP Credential ReuseAvayaCommunication Manager 3.1.x, Communication Manager 4.x2008-04-01VSRAV-2008-002
CriticalSPIM Unauthenticated SQL InjectionAvayaCommunication Manager 3.1.x, Communication Manager 4.x2008-04-01VSRAV-2008-003
HighSPIM Permissions SQL InjectionAvayaCommunication Manager 3.1.x, Communication Manager 4.x2008-04-01VSRAV-2008-003
CriticalNortel UNIStim IT Sequence Number InterceptNortelUNIStim Clients and Servers2008-04-01VSRNT-2008-002
LowWeb Application Structure DisclosureNortelCommunications Server 1000 4.50.x2008-04-01VSRNT-2008-004
CriticalMultiple Command Injection VulnerabilitiesNortelCommunications Server 1000 4.50.x2008-04-01VSRNT-2008-005
CriticalCS1000 Oversized Command DoSNortelCommunications Server 1000 4.50.x2008-06-25VSRNT-2008-006
HighSIP Multimedia PC Client Unlimited Session DoSNortelSIP Multimedia PC Client 4.x2008-06-25VSRNT-2008-007
HighServiceability Monitoring Tool Unauthenticated Access to Server Processes FunctionCiscoUnified Communications Manager 5.x, Unified Communications Manager 6.x2008-06-25VSRCS-2008-006
HighSIP Enablement Service View/Restore Data Configuration Privilege ElevationAvayaCommunication Manager 3.1.x, Communication Manager 4.x2008-06-25VSRAV-2008-004
HighCommunication Manager View/Restore Data Credential Privilege ElevationAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
MediumCommunication Manager System Log Viewer Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
MediumSIP Enablement Service Web Interface Application Server Configuration DisclosureAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
CriticalSIP Enablement Service Web Interface Database Server Configuration DisclosureAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
LowSIP Enablement Service Web Interface Certificate Utility DisclosureAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
MediumSIP Enablement Service Web Interface Objects Folder Script ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
MediumSIP Enablement Service Web Interface Default Application ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
MediumSIP Enablement Service Web Interface States Folder Script ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
MediumSIP Enablement Service Web Interface Server Configuration Information Application ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
LowSIP Enablement Service Web Interface Unrestricted Help AccessAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-004
HighMessage Storage Server SFTP Remote Storage Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server FTP Remote Storage Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server DNS Lookup Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server Ping Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server Network Configuration Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server External Hosts Configuration Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server External Hosts Add/Change Configuration Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server Windows Domain Configuration Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server Time Configuration Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server Alarm Configuration Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Command Line History Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server Maintenance Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighMessage Storage Server Events Arbitrary Command ExecutionAvayaCommunication Manager 3.1.x2008-06-25VSRAV-2008-005
HighNortel Multimedia Communications Server 5100 Call Spoofing and RedirectionNortelMultimedia Communications Server 5100 3.x2008-10-08VSRNT-2008-010
HighNortel Multimedia Communications Server 5100 IP Client Manager UNIStim File Transfer Protocol - Connection DetailsNortelMultimedia Communications Server 5100 3.x2008-10-08VSRNT-2008-011
HighAvaya Communication Manager Web Administration Interface - Privilege Elevation VulnerabilityAvayaCommunication Manager 4.x2008-10-08VSRAV-2008-007
HighAvaya Communication Manager Web Administration Interface - Code Execution VulnerabilityAvayaCommunication Manager 4.x2008-10-08VSRAV-2008-007
MediumAvaya Communication Manager Unauthorized Web AccessAvayaCommunication Manager 4.x2008-10-08VSRAV-2008-008
HighAvaya one-X Desktop Edition Session Initiation Protocol Denial of ServiceAvayaAvaya one-X Desktop Edition 2.12008-10-08VSRAV-2008-009
HighAvaya IP Softphone H.323 Denial of ServiceAvayaAvaya IP Softphone 6.0 SP42008-10-08VSRAV-2008-010
CriticalCisco Unity Authentication BypassCiscoCisco Unity 7.02008-10-08VSRCS-2008-008
HighCisco Unity Stored Cross-Site Scripting VulnerabilityCiscoCisco Unity 7.02008-10-08VSRCS-2008-009
CriticalCisco Unity Session Exhaustion Denial of ServiceCiscoCisco Unity 7.02008-10-08VSRCS-2008-010
CriticalCisco Unity Multiple Denial of Service VulnerabilitiesCiscoCisco Unity 7.0, Other2008-10-08VSRCS-2008-011
MediumCisco Unity Reports Information DisclosureCiscoCisco Unity 7.02008-10-08VSRCS-2008-012
HighMicrosoft Communicator Emoticon Denial of ServiceMicrosoftMicrosoft Communicator2008-11-11VSRMS-2008-001
HighMicrosoft Communicator Real-time Transport Control Protocol Report Block Denial of ServiceMicrosoftMicrosoft Communicator2008-11-11VSRMS-2008-002
HighMicrosoft Communicator INVITE Flood Denial of ServiceMicrosoftMicrosoft Communicator2008-11-11VSRMS-2008-003