PT-2004-3519 · First Virtual Communications · Click To Meet Premier+3

Publicado 2004-12-31 · Atualizado 2008-09-05 · CVE-2004-2629

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions First Virtual Communications Click to Meet Express (when used with H.323 conferencing endpoints) First Virtual Communications Click to Meet Premier First Virtual Communications Conference Server First Virtual Communications V-Gate

Description The issue affects the H.323 protocol implementation, allowing remote attackers to cause a denial of service. This is demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Recommendations For First Virtual Communications Click to Meet Express, consider disabling H.323 protocol support until a fix is available. For First Virtual Communications Click to Meet Premier, restrict access to H.323 conferencing endpoints to minimize the risk of exploitation. For First Virtual Communications Conference Server, avoid using the H.323 protocol for conferencing until the issue is resolved. For First Virtual Communications V-Gate, temporarily disable the H.323 protocol implementation as a workaround.

Correção

Identificadores relacionados

CVE-2004-2629

Produtos afetados

Click To Meet Express

Click To Meet Premier

Conference Server

Vgate

Referências · 5

• http://secunia.com/advisories/11192 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-2629 · Nota de Segurança
• http://cert.org/advisories/CA-2004-01.html · Nota
• http://support.fvc.com/eng/docs/misc_docs/H.323_Security_Bulletin.pdf · Nota
• http://uniras.gov.uk/vuls/2004/006489/h323.htm · Nota