Cisco 7940 SIP Phone INVITE Message Remote Denial of Service Vulnerability

Bugtraq ID:	26711
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-5583
Remote:	Yes
Local:	No
Published:	Dec 05 2007 12:00AM
Updated:	Dec 11 2007 03:52AM
Credit:	Humberto J. Abdelnur, Radu State, and Olivier Festor are credited with the discovery of this vulnerability.
Vulnerable:	Cisco IP Phone 7940
Not Vulnerable:

Cisco 7940 SIP Phone INVITE Message Remote Denial of Service Vulnerability

Cisco 7940 SIP phones are prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages.

Exploiting this issue allows remote attackers to cause the device to fail to respond to further call requests and to potentially crash, denying service to legitimate users.

This issue affects version P0S3-08-7-00 of Cisco 7940 SIP phones; other versions may also be affected.

Cisco 7940 SIP Phone INVITE Message Remote Denial of Service Vulnerability

To exploit this issue, attackers may use readily available network utilities.

The following exploit code is available:

• /data/vulnerabilities/exploits/26711.pl

Cisco 7940 SIP Phone INVITE Message Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco 7940 SIP Phone INVITE Message Remote Denial of Service Vulnerability

References:

• [Full-disclosure] Cisco Phone 7940 remote DOS (Radu State)
  
• Cisco Unified IP Phones 7900 Series Product Page (Cisco)
  
• Re: [Full-disclosure] Cisco Phone 7940 remote DOS (Clay Seaman-Kossmey)