Altigen AltiServ NMAP Scan Remote Denial of Service Vulnerability

Bugtraq ID:	46574
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 25 2011 12:00AM
Updated:	Feb 25 2011 12:00AM
Credit:	Patrick Kelley
Vulnerable:	Altigen VoIP Phone System 0 Altigen AltiServ 0
Not Vulnerable:

Altigen AltiServ NMAP Scan Remote Denial of Service Vulnerability

Altigen AltiServ is prone to a denial-of-service vulnerability.

Successful exploits will result in the VoIP system becoming unresponsive until restarted. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed.

Altigen AltiServ NMAP Scan Remote Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Altigen AltiServ NMAP Scan Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Reports indicate the vendor plans to address this issue in the next release; this has not been confirmed.

Altigen AltiServ NMAP Scan Remote Denial of Service Vulnerability

References:

• Altigen Homepage (Altigen)
  
• DoS Condition with Altigen VoIP Phone Systems (Patrick Kelley )