Grandstream HandyTone-488 PSTN-to-VoIP adapter IP packets denial of service
| grandstream-adapter-packet-dos (37414) |  Low Risk |
Description:
Grandstream HandyTone-488 PSTN-to-VoIP adapter is vulnerable to a denial of service, caused by the improper handling of IP packets. By flooding port 5060 with fragmented IP packets, a remote attacker could cause the adapter to crash.
Platforms Affected:
- Grandstream, Grandstream HT-488 phone adapter 0.1
Remedy:
No remedy available as of August 16, 2008.
Consequences:
Denial of Service
References:
- Grandstream Web site, Grandstream HandyTone-488 PSTN-to-VoIP adapter at http://www.grandstream.com/.
- VIPER-2007-058, Grandstream HandyTone-488 PSTN-to-VoIP adapter is vulnerable to fragmented packet attack at http://www.sipera.com/index.php?action=resources,threat_advisory&tid=362&.
- BID-26349: Grandstream HandyTone-488 PSTN To VoIP Adapter IP Stack Remote Denial of Service Vulnerability
- CVE-2007-5789: The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (device crash) via a flood of fragmented packets to port 5060.
- SA27401: Grandstream HandyTone HT488 Multiple Denial of Service
Reported:
Oct 24, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net