The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (kernel crash) via an RTCP index that is "much more than expected."
References
Link | Resource |
---|---|
http://osvdb.org/42174 | |
http://secunia.com/advisories/27688 | Vendor Advisory |
http://www.ingate.com/relnote-460.php | |
http://www.securityfocus.com/bid/26486 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2007-11-22 00:46
Updated : 2008-11-15 07:03
NVD link : CVE-2007-6093
Mitre link : CVE-2007-6093
CVE.ORG link : CVE-2007-6093
JSON object : View
Products Affected
ingate
- ingate_firewall
- ingate_siparator
CWE
CWE-20
Improper Input Validation