PT-2007-4645 · Polycom · Polycom Soundpoint Ip 601

Published 2007-06-22 · Updated 2012-10-31 · CVE-2007-3368

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+

Description The issue is related to a buffer overflow in the HTTP server, which can be triggered by remote attackers sending a malformed CGI parameter. This can cause a denial of service, resulting in the device rebooting.

Recommendations For Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+, consider restricting access to the HTTP server until a fix is available. As a temporary workaround, avoid using the vulnerable CGI parameter in the HTTP requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2007-3368

Affected Products

Polycom Soundpoint Ip 601

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-3368 · Security Note
• http://polycom.com/common/documents/support/downloads/voice/soundpoint_ip_soundstation_ip_sip_2.1.1_release_notes.pdf · Note
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=273& · Note
• http://securityfocus.com/bid/24547 · Note
• http://osvdb.org/37611 · Note