search for: kinsey

...Reported By Corey Farrell Posted On March 10, 2014 Last Updated On March 10, 2014 Advisory Contact Kinsey Moore <kmoore AT digium DOT com> CVE Name CVE-2014-2287 Description An attacker can use all available file descriptors using SIP INVITE requests....

...Reported By Corey Farrell Posted On March 10, 2014 Last Updated On March 10, 2014 Advisory Contact Kinsey Moore <kmoore AT digium DOT com> CVE Name CVE-2014-2287 Description An attacker can use all available file descriptors using SIP INVITE requests....

Greetings list, As a newbie to security I would like to ask any recommendation that the list might have. We are about to "install" a new box with 4.9 stable to the nice and innocent internet world. :-P The box has no services running expect apache and we telnet to it via SSH. Main function of this box will be graphing various interfaces via rrdtool. So, I would like to ask if there is

...reach the person managing the list at > freebsd-security-owner@freebsd.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of freebsd-security digest..." > > > Today's Topics: > > 1. Re: IPFW and icmp (Kevin D. Kinsey, DaleCo, S.P.) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 02 Sep 2004 12:05:26 -0500 > From: "Kevin D. Kinsey, DaleCo, S.P." <kdk@daleco.biz> > Subject: Re: IPFW and icmp > To: Dave <mudman@m...

..., please edit your Subject line so it is more specific > than "Re: Contents of freebsd-security digest..." > > > Today's Topics: > > 1. firewalk (Kenzo) > 2. Re: firewalk (Fabio Miranda Hamburger) > 3. Re: firewalk (Kenzo) > 4. Re: firewalk (Kevin D. Kinsey, DaleCo, S.P.) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 9 Aug 2004 14:04:25 -0500 > From: "Kenzo" <kenzo_chin@hotmail.com> > Subject: firewalk > To: <freebsd-security@freebsd.org> > M...

Hello Folks, The official email address for this list is `freebsd-security@freebsd.org'. Due to convention, there is an email alias for this list: security@freebsd.org, just as there is for hackers@ & freebsd-hackers@, arch@ & freebsd-arch@, and so on. The security@freebsd.org alias has been the source of occassional problems. Several times in the past, postings have been made to

...R request for remote session attempts to direct channel to external_replaces extension instead of context, without providing for the Referred-To SIP URI (Reported by Matt Jordan) * ASTERISK-24591 - Stasis() side of an ARI originated channel cannot be Redirected (Reported by Kinsey Moore) * ASTERISK-24049 - Asterisk Manager Interface: A number of list type responses aren't using astman_send_listack (Reported by Jonathan Rose) * ASTERISK-24637 - Channel re-enters Stasis() when it should not (Reported by John Bigelow) * ASTERISK-24474 - sip_to_pjsip.py...

...R request for remote session attempts to direct channel to external_replaces extension instead of context, without providing for the Referred-To SIP URI (Reported by Matt Jordan) * ASTERISK-24591 - Stasis() side of an ARI originated channel cannot be Redirected (Reported by Kinsey Moore) * ASTERISK-24049 - Asterisk Manager Interface: A number of list type responses aren't using astman_send_listack (Reported by Jonathan Rose) * ASTERISK-24637 - Channel re-enters Stasis() when it should not (Reported by John Bigelow) * ASTERISK-24474 - sip_to_pjsip.py...

...egardless to receipt of ACK. (Patched by Richard Mudgett) * Resolve issue where if a call to MeetMe includes both the dynamic(D) and always request PIN(P) options, MeetMe will ask for the PIN two times: once for creating the conference and once for entering the conference. (Patched by Kinsey Moore) * Fix New Zealand indications profile based on http://www.telepermit.co.nz/TNA102.pdf (Closes issue ASTERISK-16263. Reported, Patched by richardf) * Segfault in shell_helper in func_shell.c (Closes issue ASTERISK-18109. Reported by Michael Myles, patched by Richard Mudgett) F...

...egardless to receipt of ACK. (Patched by Richard Mudgett) * Resolve issue where if a call to MeetMe includes both the dynamic(D) and always request PIN(P) options, MeetMe will ask for the PIN two times: once for creating the conference and once for entering the conference. (Patched by Kinsey Moore) * Fix New Zealand indications profile based on http://www.telepermit.co.nz/TNA102.pdf (Closes issue ASTERISK-16263. Reported, Patched by richardf) * Segfault in shell_helper in func_shell.c (Closes issue ASTERISK-18109. Reported by Michael Myles, patched by Richard Mudgett) F...

Hi, Watching my queue_log file content, I can read entries like : 1349940957|1349940957.4|6025|Local/6455 at from-queue/n|ADDMEMBER| My extensions.conf file used this statement: exten => *9876,n,AddQueueMember(6025,Local/6455 at from-queue /n,10,,FOOBAR,hint:6455 at ext-local) I was expecting to see: 1349940957|1349940957.4|6025|FOOBAR|ADDMEMBER| Searching the web, I found a reference to

Our law firm is looking for a contractor to assist in developing and extending our internal case management system. This system tracks most aspects of our workflow. Our current system is deployed as a WebObjects application and would need to be rewritten in Ruby on Rails. We need a dedicated person(s) to help us rewrite the system and drive future development. Applicants must have at

...sk.org/r/1416/) * Prevent IAX2 from getting IPv6 addresses via DNS IAX2 does not support IPv6 and getting such addresses from DNS can cause error messages on the remote end involving bad IPv4 address casts in the presence of IPv6/IPv4 tunnels. (Closes issue ASTERISK-18090. Patched by Kinsey Moore) * Fix bad RTP media bridges in directmedia calls on peers separated by multiple Asterisk nodes. (Closes issue ASTERISK-18340. Reported by: Thomas Arimont. Closes issue ASTERISK-17725. Reported by: kwk. Tested by: twilson, jrose) * Fix crashes in ast_rtcp_write() (Closes...

...sk.org/r/1416/) * Prevent IAX2 from getting IPv6 addresses via DNS IAX2 does not support IPv6 and getting such addresses from DNS can cause error messages on the remote end involving bad IPv4 address casts in the presence of IPv6/IPv4 tunnels. (Closes issue ASTERISK-18090. Patched by Kinsey Moore) * Fix bad RTP media bridges in directmedia calls on peers separated by multiple Asterisk nodes. (Closes issue ASTERISK-18340. Reported by: Thomas Arimont. Closes issue ASTERISK-17725. Reported by: kwk. Tested by: twilson, jrose) * Fix crashes in ast_rtcp_write() (Closes...

I was wondering if anyone got firewalk to install? I'm running 4.10 stable and it doesn't seem to want to install. It's looking for libnet 1.1 or higher I believe and the ports only comes with version 1.0. I manually downloaded the latest version and installed it. Still firewalk doesn't know where to look for it. any ideas?? Thanks.

I'm not a master of the internet RFCs, but I do believe icmp messages have different types. Now to enable traceroute for IPFW, I might put in a rule like this: ipfw add pass icmp from any to me However, how would I make a rule to limit icmp messages to just those used by traceroute? Can the messages be distinguished as such? A dynamic rule that exists only for the duration of a traceroute

...forever after sip reload (Reported by Max Man) * ASTERISK-24682 - app_dial: Multiple DialEnd events emitted when MACRO_RESULT or GOSUB_RESULT are an unexpected value (Reported by Matt Jordan) * ASTERISK-24560 - Creating a named ARI bridge twice causes a crash (Reported by Kinsey Moore) * ASTERISK-24600 - Stuck IAX channels, Asterisk stops responding to most traffic, potential deadlock (Reported by Jeff Collell) * ASTERISK-24048 - [patch] contrib/scripts/install_prereq selects 32-bit packages on 64-bit hosts (Reported by Ben Klang) * ASTERISK-24288 - [patch]...

...forever after sip reload (Reported by Max Man) * ASTERISK-24682 - app_dial: Multiple DialEnd events emitted when MACRO_RESULT or GOSUB_RESULT are an unexpected value (Reported by Matt Jordan) * ASTERISK-24560 - Creating a named ARI bridge twice causes a crash (Reported by Kinsey Moore) * ASTERISK-24600 - Stuck IAX channels, Asterisk stops responding to most traffic, potential deadlock (Reported by Jeff Collell) * ASTERISK-24048 - [patch] contrib/scripts/install_prereq selects 32-bit packages on 64-bit hosts (Reported by Ben Klang) * ASTERISK-24288 - [patch]...

...ERISK-24682>] - app_dial: Multiple DialEnd events emitted when MACRO_RESULT or GOSUB_RESULT are an unexpected value (Reported by Matt Jordan) - [ASTERISK-24560 <https://issues.asterisk.org/jira/browse/ASTERISK-24560>] - Creating a named ARI bridge twice causes a crash (Reported by Kinsey Moore) - [ASTERISK-24600 <https://issues.asterisk.org/jira/browse/ASTERISK-24600>] - Stuck IAX channels, Asterisk stops responding to most traffic, potential deadlock (Reported by Jeff Collell) - [ASTERISK-24048 <https://issues.asterisk.org/jira/browse/ASTERISK-24048>] -...