AVM FRITZ!Box VoIP Remote Denial of Service Vulnerability

Bugtraq ID:	22130
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 19 2007 12:00AM
Updated:	Jan 25 2007 04:28PM
Credit:	Matthias Wenzel is credited with the discovery of this vulnerability.
Vulnerable:	AVM FRITZ!Box 7050
Not Vulnerable:	AVM FRITZ!Box 7050 14.4.2

AVM FRITZ!Box VoIP Remote Denial of Service Vulnerability

FRITZ!Box is prone to a remote denial-of-service vulnerability.

A remote attacker can exploit this issue to crash the VoIP-telephony service, effectively denying service to legitimate users.

AVM FRITZ!Box VoIP Remote Denial of Service Vulnerability

An attacker can exploit this issue using readily available networking tools.

AVM FRITZ!Box VoIP Remote Denial of Service Vulnerability

Solution:
The vendor released firmware version 14.04.26 to address this issue. Please see the references section for more information.


AVM FRITZ!Box 7050

• AVM fritz.box_fon_wlan_7050.14.04.26.image
  ftp://ftp.avm.de/fritz.box/fritzbox.fon_wlan_7050/firmware/fritz.box_f on_wlan_7050.14.04.26.image

AVM FRITZ!Box VoIP Remote Denial of Service Vulnerability

References:

• AVM FTP Firmware download (AVM)
  
• AVM Home Page (AVM)
  
• Fritz!Box 7050 (and others) DoS (Matthias Wenzel)
  
• FRITZ!Box Homepage (AVM)
  
• DoS against AVM Fritz!Box 7050 (and others) (Matthias Wenzel)
  
• DoS against AVM Fritz!Box 7050 (and others) (Matthias Wenzel)