ID
VAR-200409-0091
TITLE
Pingtel Xpressa Remote Denial of Service Vulnerability
Trust: 1.0
DESCRIPTION
The Pingtel series are SIP products, one of which is the Xpressa SIP desktop phone. There is a problem with the HTTP management interface of the Pingtel Xpressa phone. A remote attacker could use this vulnerability to conduct a denial-of-service attack on the device and crash the VxWorks operating system. Pingtel Xpressa phones can be managed through various interfaces (console, Telnet, and HTTP). The embedded HTTP service does not properly handle submission requests, and submits long requests similar to the following: GET /<buffer>/cgi/application.cgi HTTP / 1.0 Authorization: Basic [base64authstring] The buffer here exceeds 260 characters, which can cause the VxWorks system to crash. VxWorks The operating system crashed
Trust: 0.9
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 1.0 |
AFFECTED PRODUCTS
| vendor: | none | model: | - | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
TYPE
Buffer overflow
Trust: 0.2
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2004-2495 | Trust: 1.0 |
| db: | IVD | id: | 7D7E1650-463F-11E9-94C9-000C29342CB1 | Trust: 0.2 |
| db: | IVD | id: | DF4D9C3E-202C-11E6-ABEF-000C29C66E3D | Trust: 0.2 |
SOURCES
| db: | IVD | id: | 7d7e1650-463f-11e9-94c9-000c29342cb1 |
| db: | IVD | id: | df4d9c3e-202c-11e6-abef-000c29c66e3d |
| db: | CNVD | id: | CNVD-2004-2495 |
LAST UPDATE DATE
2022-05-17T02:12:09.697000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2004-2495 | date: | 2004-09-14T00:00:00 |
SOURCES RELEASE DATE
| db: | IVD | id: | 7d7e1650-463f-11e9-94c9-000c29342cb1 | date: | 2004-09-13T00:00:00 |
| db: | IVD | id: | df4d9c3e-202c-11e6-abef-000c29c66e3d | date: | 2004-09-13T00:00:00 |
| db: | CNVD | id: | CNVD-2004-2495 | date: | 2004-09-13T00:00:00 |