|
ACT WLAN Phone P202S Multiple Security Issues
|
|
Secunia Advisory:
|
SA18514
|
|
|
Release Date:
|
2006-01-17
|
|
Last Update:
|
2006-01-25
|
|
Popularity:
|
5,614 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Unknown
Security Bypass
Exposure of system information
DoS
|
|
Where:
|
From local network
|
|
Solution Status:
|
Unpatched
|
|
| OS: | ACT WLAN Phone P202S
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-0374
CVE-2006-0375
|
|
Description:
Shawn Merdinger has reported some security issues in ACT WLAN Phone P202S, which can be exploited by malicious people to potentially disclose system information, potentially cause a DoS (Denial of Service), and bypass certain security restrictions.
1) An error caused due to the phone allowing connections from the VxWorks WDB remote debugger on port 17185/udp may be exploited to gain access to the phone's OS and to collect debugging information.
2) An error caused due to the phone allowing connections to the echo service on port 7/tcp may be exploited to cause a DoS on other network devices.
3) An error caused due to the phone allowing connections to the rlogin service on port 513/tcp can be exploited to gain rlogin access to the phone without authentication.
It has also been reported that the phone has a hardcoded NTP server.
The security issues have been reported in version 1.01.21. Other versions may also be affected.
Solution:
Restrict use to within trusted networks only.
Provided and/or discovered by:
Shawn Merdinger
Changelog:
2006-01-25: Added CVE references.
Original Advisory:
http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
