Security Advisory

CVE-2002-1935

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-06-28 04:00:00

Last updated 2024-09-17 01:15:43

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar.

← Browse all CVEs View on cve.org ↗