PT-2007-4639 · Agephone · Agephone

Publicado 2007-06-22 · Atualizado 2017-07-29 · CVE-2007-3362

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions AGEphone versions prior to 1.6.2

Description The issue allows remote attackers to cause a denial of service, resulting in call disruption and device hang, via a SIP message with a malformed header. Additionally, it can cause a denial of service, leading to call disruption, false ring indication, and device outage, via a SIP message with a malformed SDP delimiter.

Recommendations For versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-3362

Produtos afetados

Agephone

Referências · 9

• http://osvdb.org/37729 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35067 · Nota
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=215& · Nota
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=214& · Nota
• http://securityfocus.com/bid/24543 · Nota
• http://securityfocus.com/bid/24540 · Nota
• http://ageet.com/us/agephone/help/index.htm#vers · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3362 · Nota de Segurança
• http://secunia.com/advisories/25781 · Nota