CVE-2007-3319 | BDVDB-2026-24814 Detail

Description#

The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header of SIP requests during MD5 digest authentication, which allows remote attackers to conduct man-in-the-middle attacks and hijack or intercept communications.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=299&
http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm
http://osvdb.org/38115
https://exchange.xforce.ibmcloud.com/vulnerabilities/34972
http://secunia.com/advisories/25747
http://www.securityfocus.com/bid/24539

Exploit#

No public exploit known

History#

Version 12007-06-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.