PT-2006-7021 · Linksys · Phonectrl.Exe+1

Armijn Hemel · Publicado 2006-12-10 · Atualizado 2018-10-17 · CVE-2006-6411

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linksys WIP 330 Wireless-G IP Phone version 1.00.06A

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via a TCP SYN scan. This can be achieved by scanning TCP ports 1-65535.

Recommendations For version 1.00.06A, consider restricting access to the PhoneCtrl.exe to minimize the risk of exploitation. As a temporary workaround, implement firewall rules to limit incoming TCP connections to necessary ports only.

Correção

Identificadores relacionados

CVE-2006-6411

Produtos afetados

Linksys Wip 330 Wireless-G Ip Phone

Phonectrl.Exe

Referências · 8

• http://securityfocus.com/archive/1/453754/100/0/threaded · Nota
• http://secunia.com/advisories/23256 · Aviso do Fabricante
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051140.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30771 · Nota
• http://vupen.com/english/advisories/2006/4894 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6411 · Nota de Segurança
• http://securityfocus.com/bid/21475 · Nota
• http://securityreason.com/securityalert/2009 · Nota