Cisco VoIP Phone Stream Request Denial Of Service Vulnerability

Bugtraq ID:	4794
Class:	Design Error
CVE:	CVE-2002-0882
Remote:	Yes
Local:	No
Published:	May 22 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Vulnerability discovery credited to Johnathan Nightingale <[email protected]>.
Vulnerable:	Cisco VoIP Phone CP-7960 3.2 Cisco VoIP Phone CP-7960 3.1 Cisco VoIP Phone CP-7960 3.0 Cisco VoIP Phone CP-7940 3.2 Cisco VoIP Phone CP-7940 3.1 Cisco VoIP Phone CP-7940 3.0 Cisco VoIP Phone CP-7910 3.2 Cisco VoIP Phone CP-7910 3.1 Cisco VoIP Phone CP-7910 3.0
Not Vulnerable:

Cisco VoIP Phone Stream Request Denial Of Service Vulnerability

The 7900 series VoIP Phones are a Voice-Over-IP solution distributed by Cisco Systems.

It is possible to deny service to users of this line of phones. By placing a request to the /StreamingStatistics script with a stream ID (i.e. http://www.example.com/StreamingStatistics?<stream> where <stream> is an integer value) of arbitrarily high value, the phone will reset itself, creating the inability to place or receive calls for a period of up to thirty seconds. This has been reportedly reproduced by passing stream ID values of greater than 32768, and consistently reproduced with a value of 120000.

Cisco VoIP Phone Stream Request Denial Of Service Vulnerability

This vulnerability may be exploited with a web browser.

Cisco VoIP Phone Stream Request Denial Of Service Vulnerability

References: