Linksys RT31P2 Remote Malformed SIP Packet Denial Of Service Vulnerabilities

Bugtraq ID:	17631
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 20 2006 12:00AM
Updated:	Apr 20 2006 09:51PM
Credit:	Peter Thermos and Guy Hadsall of Telcordia discovered these issues.
Vulnerable:	Linksys RT31P2 VoIP Router 0
Not Vulnerable:

Linksys RT31P2 Remote Malformed SIP Packet Denial Of Service Vulnerabilities

Linksys RT31P2 routers are susceptible to multiple remote denial-of-service vulnerabilities because the devices fail to properly handle malformed network traffic.

This issue allows remote attackers to crash affected devices, denying service to legitimate users.

Linksys RT31P2 Remote Malformed SIP Packet Denial Of Service Vulnerabilities


Currently we are not aware of any exploits for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Linksys RT31P2 Remote Malformed SIP Packet Denial Of Service Vulnerabilities

Solution:

Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]

Linksys RT31P2 Remote Malformed SIP Packet Denial Of Service Vulnerabilities

References:

• Linksys RT31P2 VoIP router denial of service vulnerabilities (US-CERT)
  
• RT31P2 Product Page (Linksys)