Re: [Full-disclosure] CISCO Phone 7940 DOS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This is in response to the e-mail posted by Radu State. The original e-mail is available at http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053070.html Hi Radu, Thanks for reporting this issue to Cisco's Product Security Incident Respons...

CVE-2007-1542

Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVITE request. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2007-1542

Cisco IP Phone 7940/7960 devices with firmware prior to POS8-6-0 are affected by a denial-of-service vulnerability triggered by malformed SIP INVITE messages in the Remote-Party-ID sipURI field. A remote attacker can cause the phones to reboot, leading to temporary DoS. The issue stems from error...