Grandstream HandyTone-488 PSTN-to-VoIP adapter SIP INVITE denial of service
| grandstream-adapter-sip-invite-dos (37411) |  Low Risk |
Description:
Grandstream HandyTone-488 PSTN-to-VoIP adapter is vulnerable to a denial of service, caused by a buffer overflow error in the SIP parser implementation. By sending a specially-crafted SIP INVITE message, a remote attacker could overflow a buffer and cause the adapter to crash.
Platforms Affected:
- Grandstream, Grandstream HT-488 phone adapter 0.1
Remedy:
No remedy available as of October 4, 2008.
Consequences:
Denial of Service
References:
- Grandstream Web site, Grandstream HandyTone-488 PSTN-to-VoIP adapter at http://www.grandstream.com/.
- VIPER-2007-057, Grandstream HandyTone-488 PSTN-to-VoIP adapter is vulnerable to buffer overflow at http://www.sipera.com/index.php?action=resources,threat_advisory&tid=361&.
- BID-26155: Flatnuke3 File Manager Module Unauthorized Access Vulnerability
- BID-26201: Grandstream HandyTone-488 PSTN To VoIP Adapter Remote Denial of Service Vulnerability
- CVE-2007-5788: Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP INVITE message.
- SA27401: Grandstream HandyTone HT488 Multiple Denial of Service
Reported:
Oct 24, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net