[SA19722] Linksys RT31P2 SIP Messages Denial of Service Vulnerabilities

TITLE:
Linksys RT31P2 SIP Messages Denial of Service Vulnerabilities

SECUNIA ADVISORY ID:
SA19722

VERIFY ADVISORY:
http://secunia.com/advisories/19722/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

OPERATING SYSTEM:
Linksys RT31P2
http://secunia.com/product/9456/

DESCRIPTION:
Telcordia has reported some vulnerabilities in Linksys RT31P2, which
can be exploited by malicious people to cause a DoS (Denial of
Service).

The vulnerabilities are caused due to various errors in the
processing of malformed SIP (Session Initiation Protocol) messages.
This may be exploited to disrupt phone calls and cause a connected
phone to stop working.

SOLUTION:
The product has reportedly been discontinued.

Filter traffic or use another product.

PROVIDED AND/OR DISCOVERED BY:
Peter Thermos and Guy Hadsall, Telcordia.

ORIGINAL ADVISORY:
US-CERT VU#621566:
http://www.kb.cert.org/vuls/id/621566

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.