PT-2007-4711 · Snom · Snom320-Sip+2

Published 2007-06-27 · Updated 2008-11-15 · CVE-2007-3440

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Snom 320 SIP Phone version 3.25, snom320-SIP version 6.2.3, and snom320 jffs version 23.36

Description The issue allows remote attackers to place calls to arbitrary phone numbers via certain requests to the "web server on port 1800".

Recommendations For Snom 320 SIP Phone version 3.25, snom320-SIP version 6.2.3, and snom320 jffs version 23.36, restrict access to the web server on port 1800 to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-3440

Affected Products

Snom 320 Sip Phone

Snom320 Jffs

Snom320-Sip

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-3440 · Security Note
• http://securityfocus.com/bid/24535 · Note
• http://osvdb.org/37752 · Note
• http://secunia.com/advisories/25840 · Note
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=276& · Note