From: Secunia Security Advisories (sec-advsecunia.com)
Date: Thu Oct 18 2007 - 11:17:06 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,700 different Windows applications.

Request your account, the Secunia Network Software Inspector (NSI):
http://secunia.com/network_software_inspector/

----------------------------------------------------------------------

TITLE:
Nortel IP Softphone 2050 Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA27252

VERIFY ADVISORY:
http://secunia.com/advisories/27252/

CRITICAL:
Moderately critical

IMPACT:
DoS, System access

WHERE:
From local network

SOFTWARE:
Nortel IP Softphone 2050
http://secunia.com/product/16187/

DESCRIPTION:
A vulnerability has been reported in Nortel IP Softphone 2050, which
can be exploited by malicious people to cause a DoS (Denial of
Service) and potentially to compromise a vulnerable system.

The vulnerability is caused due to boundary errors when processing
invalid packets sent to the RTCP port. This can be exploited to cause
a buffer overflow and crash the application via specially crafted
packets.

Successful exploitation may allow execution of arbitrary code.

SOLUTION:
Use only in a trusted network environment.

NOTE: The vendor is still investigating the vulnerability.

PROVIDED AND/OR DISCOVERED BY:
Daniel Stirnimann and Cyrill Brunschwiler, Compass Security Network
Computing AG

ORIGINAL ADVISORY:
Nortel:
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655203

Compass Security Network Computing AG:
http://www.csnc.ch/static/advisory/csnc/nortel_UNIStim_IP_softphone_buffer-overflow_v1.0.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]