----------------------------------------------------------------------

Want to work within IT-Security?

Secunia is expanding its team of highly skilled security experts.
We will help with relocation and obtaining a work permit.

Currently the following type of positions are available:
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Grandstream GXP-2000 Denial of Service Vulnerability

SECUNIA ADVISORY ID:
SA22265

VERIFY ADVISORY:
http://secunia.com/advisories/22265/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From local network

OPERATING SYSTEM:
Grandstream GXP-2000
http://secunia.com/product/12227/

DESCRIPTION:
Shawn Merdinger has reported a vulnerability in the Grandstream
GXP-2000 VoIP Desktop Phone, which can be exploited by malicious
people to cause a DoS (Denial of Service).

The phone has several undocumented open UDP ports, including 5062,
5064, 5066, 9876 and 26789. Sending large amounts of ASCII data to
these ports can cause the phone to freeze, reboot or stop working
correctly.

The vulnerability is reported in firmware version 1.1.0.5. Other
versions may also be affected.

SOLUTION:
Update the firmware to the latest version.
http://www.grandstream.com/BETATEST/GXP2000_BT200/

PROVIDED AND/OR DISCOVERED BY:
Shawn Merdinger

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------