Cisco Unified IP Phones 9900 Series Crafted Header Unregister Denial of Service Vulnerability

Bugtraq ID:	64770
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-0658
Remote:	Yes
Local:	No
Published:	Jan 10 2014 12:00AM
Updated:	Jan 14 2014 12:22AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified IP Phones 9900 Series Crafted Header Unregister Denial of Service Vulnerability

The Cisco Unified IP Phone 9900 series is prone to a denial-of-service vulnerability.

A remote attacker may exploit this issue to cause the IP phone to unregister, denying service to legitimate users.

This issue is tracked by Cisco Bug ID CSCul24898.

Cisco Unified IP Phones 9900 Series Crafted Header Unregister Denial of Service Vulnerability

Attackers can exploit this issue using browser or readily available tools.

Cisco Unified IP Phones 9900 Series Crafted Header Unregister Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified IP Phones 9900 Series Crafted Header Unregister Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )