PT-2006-7021 · Linksys · Phonectrl.Exe+1

Armijn Hemel · Published 2006-12-10 · Updated 2018-10-17 · CVE-2006-6411

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linksys WIP 330 Wireless-G IP Phone version 1.00.06A

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via a TCP SYN scan. This can be achieved by scanning TCP ports 1-65535.

Recommendations For version 1.00.06A, consider restricting access to the PhoneCtrl.exe to minimize the risk of exploitation. As a temporary workaround, implement firewall rules to limit incoming TCP connections to necessary ports only.

Fix

Related Identifiers

CVE-2006-6411

Affected Products

Linksys Wip 330 Wireless-G Ip Phone

Phonectrl.Exe

References · 8

• http://secunia.com/advisories/23256 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6411 · Security Note
• http://securityfocus.com/archive/1/453754/100/0/threaded · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051140.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30771 · Note
• http://vupen.com/english/advisories/2006/4894 · Note
• http://securityfocus.com/bid/21475 · Note
• http://securityreason.com/securityalert/2009 · Note