Cisco Unified IP Phone SCCP and SIP Protocol Multiple Remote Vulnerabilities
BID:27774
Info
Cisco Unified IP Phone SCCP and SIP Protocol Multiple Remote Vulnerabilities
| Bugtraq ID: | 27774 |
| Class: | Unknown |
| CVE: |
CVE-2008-0530 CVE-2008-0526 CVE-2008-0527 CVE-2008-0528 CVE-2008-0529 CVE-2008-0531 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 13 2008 12:00AM |
| Updated: | Feb 14 2008 03:55PM |
| Credit: | Jon Griffin and Mustaque Ahamad of the School of Computer Science at the Georgia Institute of Technology, Sven Weizenegger of T-System and the vendor reported these issues. |
| Vulnerable: |
Cisco Unified IP Phone 7960G Cisco Unified IP Phone 7960 Cisco Unified IP Phone 7940G Cisco Unified IP Phone 7940 Cisco Unified IP Phone 7936 Cisco Unified IP Phone 7935 |
| Not Vulnerable: |
Cisco Unified IP Phone SIP 8.8(0) Cisco Unified IP Phone SCCP 8.0(8) Cisco Unified IP Phone SCCP 3.3(15) Cisco Unified IP Phone SCCP 3.2(17) |
Discussion
Cisco Unified IP Phone SCCP and SIP Protocol Multiple Remote Vulnerabilities
Cisco Unified IP Phone is prone to multiple remote vulnerabilities, including:
- three buffer-overflow vulnerabilities
- three denial-of service vulnerabilities.
An attacker can exploit these issues to execute arbitrary code with superuser privileges or crash the affected device, denying service to legitimate users.
Cisco Unified IP Phone is prone to multiple remote vulnerabilities, including:
- three buffer-overflow vulnerabilities
- three denial-of service vulnerabilities.
An attacker can exploit these issues to execute arbitrary code with superuser privileges or crash the affected device, denying service to legitimate users.
Exploit / POC
Cisco Unified IP Phone SCCP and SIP Protocol Multiple Remote Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Cisco Unified IP Phone SCCP and SIP Protocol Multiple Remote Vulnerabilities
Solution:
Cisco has released an advisory along with fixes to address these issues. Please see the referenced advisory for details.
Solution:
Cisco has released an advisory along with fixes to address these issues. Please see the referenced advisory for details.
References
Cisco Unified IP Phone SCCP and SIP Protocol Multiple Remote Vulnerabilities
References:
References:
- Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation (Cisco)
- Cisco Unified IP Phone Homepage (Cisco )
- Cisco Security Advisory: Cisco Unified IP Phone Overflow and Denial of Service V (Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Cisco Unified IP Phone Overflow and Denial of Service V (Cisco)