Cisco VoIP Phone Web Interface System Memory Contents Information Leakage Vulnerability

Bugtraq ID:	4798
Class:	Design Error
CVE:	CVE-2002-0882
Remote:	Yes
Local:	No
Published:	May 22 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Vulnerability discovery credited to Johnathan Nightingale <[email protected]>.
Vulnerable:	Cisco VoIP Phone CP-7960 3.2 Cisco VoIP Phone CP-7960 3.1 Cisco VoIP Phone CP-7960 3.0 Cisco VoIP Phone CP-7940 3.2 Cisco VoIP Phone CP-7940 3.1 Cisco VoIP Phone CP-7940 3.0 Cisco VoIP Phone CP-7910 3.2 Cisco VoIP Phone CP-7910 3.1 Cisco VoIP Phone CP-7910 3.0
Not Vulnerable:

Cisco VoIP Phone Web Interface System Memory Contents Information Leakage Vulnerability

The 7900 series VoIP Phones are a Voice-Over-IP solution distributed by Cisco Systems.

By placing a request to the /PortInformation script with a port ID (i.e. http://www.example.com/PortInformation?<port> where <port> is an integer value) of arbitrarily high value, the web server will return a dump of the contents of phone memory. This has been reportedly reproduced by passing port ID values of greater than 32768, and consistently reproduced with a value of 120000.

Cisco VoIP Phone Web Interface System Memory Contents Information Leakage Vulnerability

This vulnerability may be exploited with a web browser.

Cisco VoIP Phone Web Interface System Memory Contents Information Leakage Vulnerability

References: