QwikSec

Security Database

CVE

CWE

Training

CVE-2005-2182

Published: Jul 10, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20050706 VoIP-Phones: Weakness in proccessing SIP-Notify-Messages

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_SECTRACK

http://pentest.tele-consulting.com/advisories/05_07_06_voip-phones.txt

x_refsource_MISC

sip-notify-message-spoof(21260)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.