PT-2002-1893 · Cisco · Cisco Ip Phone

Publicado 2002-08-31 · Atualizado 2018-10-30 · CVE-2002-0882

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco IP Phone versions of models 7910, 7940, and 7960

Description: The issue allows remote attackers to cause a denial of service, potentially leading to a reset, and may also enable the reading of sensitive memory. This can be achieved by providing a large integer value in either the stream ID of the "StreamingStatistics" script or the port ID of the "PortInformation" script.

Recommendations: For Cisco IP Phone models 7910, 7940, and 7960, consider restricting access to the StreamingStatistics and PortInformation scripts as a temporary workaround until a patch is available. Avoid using large integer values in the stream ID and port ID parameters to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0882

Produtos afetados

Cisco Ip Phone

Referências · 7

• http://iss.net/security_center/static/9142.php · Nota
• http://iss.net/security_center/static/9143.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0882 · Nota de Segurança
• http://securityfocus.com/bid/4794 · Aviso do Fabricante
• http://securityfocus.com/bid/4798 · Nota
• http://cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/273673 · Nota