PT-2004-3519 · First Virtual Communications · Click To Meet Premier+3

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2629

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions First Virtual Communications Click to Meet Express (when used with H.323 conferencing endpoints) First Virtual Communications Click to Meet Premier First Virtual Communications Conference Server First Virtual Communications V-Gate

Description The issue affects the H.323 protocol implementation, allowing remote attackers to cause a denial of service. This is demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Recommendations For First Virtual Communications Click to Meet Express, consider disabling H.323 protocol support until a fix is available. For First Virtual Communications Click to Meet Premier, restrict access to H.323 conferencing endpoints to minimize the risk of exploitation. For First Virtual Communications Conference Server, avoid using the H.323 protocol for conferencing until the issue is resolved. For First Virtual Communications V-Gate, temporarily disable the H.323 protocol implementation as a workaround.

Fix

Related Identifiers

CVE-2004-2629

Affected Products

Click To Meet Express

Click To Meet Premier

Conference Server

Vgate

References · 5

• http://secunia.com/advisories/11192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2629 · Security Note
• http://cert.org/advisories/CA-2004-01.html · Note
• http://support.fvc.com/eng/docs/misc_docs/H.323_Security_Bulletin.pdf · Note
• http://uniras.gov.uk/vuls/2004/006489/h323.htm · Note