CVE-2004-1940

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-1940
sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value that causes an out-of-bounds read.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://marc.info/?l=bugtraq&m=108244325924859&w=2 Mailing List Third Party Advisory
http://www.securiteam.com/unixfocus/5PP0B1FCLY.html Broken Link Exploit
http://www.securityfocus.com/bid/10159 Broken Link Exploit Patch Third Party Advisory VDB Entry
http://www.wirlab.net/kphone/changes-4.0.2.html Broken Link Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15874 Broken Link VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:wirlab:kphone:*:*:*:*:*:*:*:*
History

15 Feb 2024, 20:54

Type Values Removed Values Added
References (MISC) http://www.securiteam.com/unixfocus/5PP0B1FCLY.html - Exploit (MISC) http://www.securiteam.com/unixfocus/5PP0B1FCLY.html - Broken Link, Exploit
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/15874 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/15874 - Broken Link, VDB Entry
References (BID) http://www.securityfocus.com/bid/10159 - Exploit, Patch (BID) http://www.securityfocus.com/bid/10159 - Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
References (CONFIRM) http://www.wirlab.net/kphone/changes-4.0.2.html - Patch (CONFIRM) http://www.wirlab.net/kphone/changes-4.0.2.html - Broken Link, Patch
References (BUGTRAQ) http://marc.info/?l=bugtraq&m=108244325924859&w=2 - (BUGTRAQ) http://marc.info/?l=bugtraq&m=108244325924859&w=2 - Mailing List, Third Party Advisory
First Time Wirlab kphone
Wirlab
CWE NVD-CWE-Other CWE-125
CPE cpe:2.3:a:kphone:kphone:3.14:*:*:*:*:*:*:*
cpe:2.3:a:kphone:kphone:3.13:*:*:*:*:*:*:*
cpe:2.3:a:kphone:kphone:3.12:*:*:*:*:*:*:*
cpe:2.3:a:kphone:kphone:3.0:*:*:*:*:*:*:*
cpe:2.3:a:kphone:kphone:2.11:*:*:*:*:*:*:*
cpe:2.3:a:kphone:kphone:3.1:*:*:*:*:*:*:*
cpe:2.3:a:kphone:kphone:2.1:*:*:*:*:*:*:*
cpe:2.3:a:kphone:kphone:3.11:*:*:*:*:*:*:*
cpe:2.3:a:kphone:kphone:2.0:*:*:*:*:*:*:*
cpe:2.3:a:kphone:kphone:4.0.1:*:*:*:*:*:*:*		 cpe:2.3:a:wirlab:kphone:*:*:*:*:*:*:*:*
Information

Published : 2004-12-31 05:00

Updated : 2024-02-28 10:24

NVD link : CVE-2004-1940

Mitre link : CVE-2004-1940

CVE.ORG link : CVE-2004-1940

JSON object : View

Products Affected

wirlab

  • kphone
CWE
CWE-125

Out-of-bounds Read