PT-2007-4711 · Snom · Snom320-Sip+2

Publicado 2007-06-27 · Atualizado 2008-11-15 · CVE-2007-3440

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Snom 320 SIP Phone version 3.25, snom320-SIP version 6.2.3, and snom320 jffs version 23.36

Description The issue allows remote attackers to place calls to arbitrary phone numbers via certain requests to the "web server on port 1800".

Recommendations For Snom 320 SIP Phone version 3.25, snom320-SIP version 6.2.3, and snom320 jffs version 23.36, restrict access to the web server on port 1800 to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-3440

Produtos afetados

Snom 320 Sip Phone

Snom320 Jffs

Snom320-Sip

Referências · 5

• http://securityfocus.com/bid/24535 · Nota
• http://osvdb.org/37752 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3440 · Nota de Segurança
• http://secunia.com/advisories/25840 · Nota
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=276& · Nota