The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (kernel crash) via an RTCP index that is "much more than expected."
References
Link | Resource |
---|---|
http://www.ingate.com/relnote-460.php | |
http://secunia.com/advisories/27688 | Vendor Advisory |
http://osvdb.org/42174 | |
http://www.securityfocus.com/bid/26486 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2007-11-21 16:46
Updated : 2008-11-14 23:03
NVD link : CVE-2007-6093
Mitre link : CVE-2007-6093
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
ingate
- ingate_firewall
- ingate_siparator