Cisco 7900 Series VoIP Phone ARP Spoofing Denial Of Service Vulnerability

Bugtraq ID:	8398
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 12 2003 12:00AM
Updated:	Aug 12 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to "Wil Allsopp" <[email protected]>.
Vulnerable:	Cisco VoIP Phone 7912G 0 + Cisco Call Manager 3.3 + Cisco Call Manager 3.2 + Cisco Call Manager 3.1 (3a) + Cisco Call Manager 3.1 (2) + Cisco Call Manager 3.1 + Cisco Call Manager 3.0 + Cisco Call Manager 2.0 + Cisco Call Manager 1.0 Cisco VoIP Phone 7905G 0 + Cisco Call Manager 3.3 + Cisco Call Manager 3.2 + Cisco Call Manager 3.1 (3a) + Cisco Call Manager 3.1 (2) + Cisco Call Manager 3.1 + Cisco Call Manager 3.0 + Cisco Call Manager 2.0 + Cisco Call Manager 1.0 Cisco VoIP Phone 7902G 0 + Cisco Call Manager 3.3 + Cisco Call Manager 3.2 + Cisco Call Manager 3.1 (3a) + Cisco Call Manager 3.1 (2) + Cisco Call Manager 3.1 + Cisco Call Manager 3.0 + Cisco Call Manager 2.0 + Cisco Call Manager 1.0 Cisco Call Manager 3.3
Not Vulnerable:	Cisco Call Manager 3.3 (3)

Cisco 7900 Series VoIP Phone ARP Spoofing Denial Of Service Vulnerability

The Cisco 7900 Series of Voice-Over-IP phones have been reported prone to a vulnerability, where a spoofed ARP message may crash the phone.

Other attacks including man in the middle style attacks, for example packet injection and data interception have also been reported possible.

Cisco 7900 Series VoIP Phone ARP Spoofing Denial Of Service Vulnerability

References:

• 7900 Series IP Phones Homepage (Cisco)
  
• Release Note Updates for Cisco IP Phone Models 7902G/7905G/7912G for Cisco CallM (Cisco)