Avaya Argent Office Malformed DNS Packet Denial of Service Vulnerability

Bugtraq ID:	8976
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 07 2001 12:00AM
Updated:	Mar 19 2015 09:16AM
Credit:	The discovery of this vulnerability has been credited to Jacek Lipkowski <[email protected]>.
Vulnerable:	Avaya Argent Office
Not Vulnerable:

Avaya Argent Office Malformed DNS Packet Denial of Service Vulnerability

It has been reported that Avaya Argent Office is prone to a denial of service condition when handling malformed DNS packets. The problem is said to occur when a DNS packet with no payload is handled. Receiving the packet is said to cause the device to reboot.

Avaya Argent Office Malformed DNS Packet Denial of Service Vulnerability

An exploit has been made available by Jacek Lipkowski <[email protected]>.

• /data/vulnerabilities/exploits/argent_kill.c

Avaya Argent Office Malformed DNS Packet Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Avaya Argent Office Malformed DNS Packet Denial of Service Vulnerability

References:

• Argent Office Product Description (Avaya)
  
• Avaya Home Page (Avaya)