Cisco 7940 Phone SIP消息远程拒绝服务漏洞

新客网 XKER.COM 2007-08-29 来源：绿盟科技收藏本文

发布日期：2007-08-20

更新日期：2007-08-22

受影响系统：

Cisco IP Phone 7940

描述：

--------------------------------------------------------------------------------

BUGTRAQ ID: 25378

Cisco 7940型IP电话是一种多功能通讯设备，通过IP网络传递语音信号。

Cisco 7940在处理特定的请求序列时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。

如果向Cisco 7940 IP电话发送了以下3个消息序列的话：

X ------------------------- INVITE -----------------------> Cisco
X <--- 481 transaction does not exists -----  Cisco
X ------------------------- OPTIONS--------------------> Cisco
X <--------------------------- OK -------------------------  Cisco
X <--- 481 transaction does not exists -----  Cisco
X ------------------------- OPTIONS--------------------> Cisco

或发送以下10个消息序列的话：

X ------------------------- INVITE -----------------------> Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X ------------------------- OPTIONS--------------------> Cisco
X <--------------------- 200 OK -------------------------  Cisco
X ------------------------- OPTIONS--------------------> Cisco
X <--------------------- 200 OK -------------------------  Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X ------------------------- INVITE -----------------------> Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X ------------------------- OPTIONS--------------------> Cisco
X <--------------- 404 Not Found ------------------  Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X <--------------- 400 Bad Request  ---------------  Cisco
X ------------------------- OPTIONS--------------------> Cisco
X <--------------------- 200 OK -------------------------  Cisco
X ------------------------- INVITE -----------------------> Cisco
X <----------------100 Trying  -------------------------  Cisco
X <--------------- 404 Not Found ------------------  Cisco
X <--------------- 404 Not Found ------------------  Cisco
X <--------------- 404 Not Found ------------------  Cisco
X ------------------------- OPTIONS--------------------> Cisco
X <--------------------- 200 OK -------------------------  Cisco
X <--------------- 404 Not Found ------------------  Cisco
X ------------------------- OPTIONS--------------------> Cisco
X <--------------------- 200 OK -------------------------  Cisco
X <--------------- 404 Not Found ------------------  Cisco

就会导致设备重启。

<*来源：Radu State （state@loria.fr）

链接：http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065401.html

http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065402.html

http://secunia.com/advisories/26547/

建议：

--------------------------------------------------------------------------------

厂商补丁：

Cisco

-----

目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：

http://www.cisco.com/warp/public/707/advisory.html

()

上一篇：Total Commander FileInfo拒绝服务漏洞下一篇：Asterisk SIP对话历史记录资源耗尽漏洞

【收藏】【评论】【推荐】【投稿】【打印】【关闭】