Linksys SPA-2102 Phone Adapter Packet Handling Denial of Service Vulnerability

Bugtraq ID:	28414
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-2092
Remote:	Yes
Local:	No
Published:	Mar 24 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	sipher
Vulnerable:	Linksys SPA-2102 Phone Adapter (firmware) 3.3.6
Not Vulnerable:

Linksys SPA-2102 Phone Adapter Packet Handling Denial of Service Vulnerability

Linksys SPA-2102 Phone Adapter is prone to a denial-of-service vulnerability when handling multiple packets in quick succession.

Attackers can exploit this issue to deny access to the device's control center for legitimate users. Reports indicate that this issue is exploitable only via computers on the same LAN as the device.

Linksys SPA-2102 Phone Adapter running firmware 3.3.6 is vulnerable; other versions may also be affected.

Linksys SPA-2102 Phone Adapter Packet Handling Denial of Service Vulnerability

Attackers can use readily available networking utilities to launch attacks.

The following example exploit is available:

ping -l 65500 192.168.0.1

Linksys SPA-2102 Phone Adapter Packet Handling Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linksys SPA-2102 Phone Adapter Packet Handling Denial of Service Vulnerability

References:

• Linksys Homepage (Linksys)
  
• Linksys phone adapter denial of service ([email protected] )