MultiTech MultiVOIP INVITE Remote Buffer Overflow Vulnerability

Bugtraq ID:	15711
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 05 2005 12:00AM
Updated:	Dec 05 2005 12:00AM
Credit:	Discovered by Ejovi Nuwere <[email protected]>.
Vulnerable:	MultiTech MultiVOIP
Not Vulnerable:

MultiTech MultiVOIP INVITE Remote Buffer Overflow Vulnerability

MultiTech MultiVOIP devices are prone to a remotely exploitable buffer overflow vulnerability. Successful exploitation could result in a denial of service or potential arbitrary code execution.

This vulnerability may also be present in third-party devices that implement the MultiTech VOIP Gateway and protocol stack.

MultiTech MultiVOIP INVITE Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MultiTech MultiVOIP INVITE Remote Buffer Overflow Vulnerability

Solution:
It has been reported that this issue was addressed in version x.08 of the software, although this has not been confirmed.

------
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MultiTech MultiVOIP INVITE Remote Buffer Overflow Vulnerability

References:

• ADVISORY: Buffer Overflow in MultiTech VoIP Implementations (SecurityLab Technologies, Inc.)
  
• MultiVOIP (MultiTech)