Voxalot / SIP Broker Support Forums - Cisco IP Phone 7940/7960 Vulnerability

Voxalot / SIP Broker Support Forums (https://forum.sipbroker.com/index.php)

- VoIP News (https://forum.sipbroker.com/forumdisplay.php?f=13)

- - Cisco IP Phone 7940/7960 Vulnerability (https://forum.sipbroker.com/showthread.php?t=1286)

martin

03-21-2007 02:23 PM

Cisco IP Phone 7940/7960 Vulnerability

Cisco released updates to their SIP firmware to resolve DOS (denial of service) vulnerabilities with the 7940/7960 IP phones.

Quote:

The vulnerability is caused due to an error within the handling of certain SIP INVITE messages. This can be exploited to reboot the device by sending a specially crafted INVITE message with a malformed "sipURI" field of the Remote-Party-ID.

Original Article

All times are GMT. The time now is 03:17 PM.