DoS against AVM Fritz!Box 7050 (and others)

To: full-disclosure@xxxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
Subject: DoS against AVM Fritz!Box 7050 (and others)
From: collin@xxxxxxxxxxxxxxx
Date: Fri, 19 Jan 2007 16:46:55 +0100
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
User-agent: Internet Messaging Program (IMP) H3 (4.0)

Denial of Service against AVM Fritz!Box 7050 (and others)

Discovered by: Matthias Wenzel
Advisory: http://mazzoo.de/blog/2007/01/18#FritzBox_DoS

Manufacturer: AVM (www.avm.de)
Product: Fritz!Box 750 (and others)

Vendor was notified 6 month ago (see blog entry by Matthias)

Sending a zero-length UDP packet to port 5060 (SIP) of a AVM Fritz!Box will
crash the VoIP-telephony application. This works from any IP-interface,
including the DSL line.


Collin (only delivering the message to FD and BugTraq)

Follow-Ups:
- Re: DoS against AVM Fritz!Box 7050 (and others)
  - From: Matthias Wenzel

Prev by Date: TSLSA-2007-0003 - multi
Next by Date: Help project files (.HPJ) buffer overflow vulnerability in Microsoft Help Workshop
Previous by thread: TSLSA-2007-0003 - multi
Next by thread: Re: DoS against AVM Fritz!Box 7050 (and others)
Index(es):
- Date
- Thread