Grandstream Budge Tone Denial Of Service Vulnerability

Bugtraq ID:	14539
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 10 2005 12:00AM
Updated:	Aug 10 2005 12:00AM
Credit:	Pierre Kroma is credited with the discovery of this vulnerability.
Vulnerable:	Grandstream BudgeTone 102 Grandstream BudgeTone 101
Not Vulnerable:

Grandstream Budge Tone Denial Of Service Vulnerability

Grandstream Budge Tone telephones are prone to a denial of service vulnerability.

This particular attack will cause a Grandstream Budge Tone telephone to malfunction by aborting any call currently in progress, rendering the display on the telephone inoperable, and causing the integrated HTTP server to stop responding. Switching the telephone off and on again will resume normal operation.

Grandstream Budge Tone Denial Of Service Vulnerability

No exploit is required.

• /data/vulnerabilities/exploits/grandstream-Dos.pl

Grandstream Budge Tone Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Grandstream Budge Tone Denial Of Service Vulnerability

References:

• Grandstream BudgeTone 100 series SIP Phones (Grandstream)
  
• Grandstream Budge Tone 101/102 DoS Vulnerability (Pierre Kroma)