|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
[Full-disclosure] (0-Day) GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP ports and DoS
shawnmer
io.com
Date: Wed Oct 04 2006 - 19:11:04 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Title: GrandStream GXP-2000 VoIP Desktop Phone multiple undocumented UDP
ports and DoS
Version: 1.1.0.5
Issues:
1.The phone has multiple undocumented open UDP ports, including 5062,
5064, 5066, 9876, 26789
2.Sending large amount of ascii data via NetCat to any open UDP port,
including UDP/5060, results in the phone either rebooting or placed in a
frozen state, possibly appearing normal (display maintains text, etc.),
except the phone will not be functional.
Credit:
Shawn Merdinger, Independent Security Researcher
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]