PT-2008-1591 · Lscube · Lscube Feng

Published 2008-01-04 · Updated 2018-10-15 · CVE-2007-6628

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions LScube Feng versions 0.1.15 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash due to a NULL dereference. This can be achieved through either a malformed Transport header or a malformed Range header. The malformed Transport header can trigger misparsing in parse transport header in RTSP setup.c, for example, by including only a "RTP/AVP;unicast;client port" sequence. Similarly, a malformed Range header can trigger misparsing in parse play time range in RTSP Play, such as an empty Range header.

Recommendations For LScube Feng versions 0.1.15 and earlier, consider disabling the RTSP functionality until a patch is available to prevent exploitation through malformed headers. Restrict access to the parse transport header and parse play time range functions to minimize the risk of daemon crashes due to misparsing. Avoid using malformed Transport and Range headers in API requests to the affected RTSP endpoints.

Exploit

Fix

Related Identifiers

CVE-2007-6628

Affected Products

Lscube Feng

References · 10

• 🔥 http://aluigi.altervista.org/adv/fengulo-adv.txt · Exploit
• 🔥 http://securityfocus.com/bid/27049 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6628 · Security Note
• http://securityreason.com/securityalert/3507 · Note
• http://securityfocus.com/archive/1/485574/100/0/threaded · Note
• http://vupen.com/english/advisories/2008/0011 · Note
• http://aluigi.org/poc/fengulo.zip · Note
• http://secunia.com/advisories/28229 · Note
• http://osvdb.org/40534 · Note
• http://osvdb.org/40535 · Note