APCO Project 25 Denial of Service, Traffic Injection, and Information Disclosure Vulnerabilities

Bugtraq ID:	49116
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 10 2011 12:00AM
Updated:	Aug 10 2011 12:00AM
Credit:	Sandy Clark, Travis Goodspeed, Perry Metzger Zachary, Wasserman, Kevin Xu Matt Blaze.
Vulnerable:	APCO International Project 25 0
Not Vulnerable:

APCO Project 25 Denial of Service, Traffic Injection, and Information Disclosure Vulnerabilities

Project 25 is prone to multiple vulnerabilities.

Attackers can exploit these issues to cause denial-of service conditions, obtain potentially sensitive information, and inject unauthenticated traffic into secured channels.

APCO Project 25 Denial of Service, Traffic Injection, and Information Disclosure Vulnerabilities

The discoverer's of these issues have developed exploit tools.

APCO Project 25 Denial of Service, Traffic Injection, and Information Disclosure Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

APCO Project 25 Denial of Service, Traffic Injection, and Information Disclosure Vulnerabilities

References:

• Project 25 Homepage (APCO International)
  
• Why (Special Agent) Johnny (Still) Can�??t Encrypt: A Security Analysis of the APC (APCO International)