PT-2002-1893 · Cisco · Cisco Ip Phone

Published 2002-08-31 · Updated 2018-10-30 · CVE-2002-0882

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco IP Phone versions of models 7910, 7940, and 7960

Description: The issue allows remote attackers to cause a denial of service, potentially leading to a reset, and may also enable the reading of sensitive memory. This can be achieved by providing a large integer value in either the stream ID of the "StreamingStatistics" script or the port ID of the "PortInformation" script.

Recommendations: For Cisco IP Phone models 7910, 7940, and 7960, consider restricting access to the StreamingStatistics and PortInformation scripts as a temporary workaround until a patch is available. Avoid using large integer values in the stream ID and port ID parameters to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0882

Affected Products

Cisco Ip Phone

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2002-0882 · Security Note
• http://securityfocus.com/bid/4794 · Vendor Advisory
• http://cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml · Vendor Advisory
• http://iss.net/security_center/static/9142.php · Note
• http://iss.net/security_center/static/9143.php · Note
• http://securityfocus.com/bid/4798 · Note
• http://online.securityfocus.com/archive/1/273673 · Note