Description
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device crash) via SIP INVITE commands with a long header field name sent during startup and (2) cause a denial of service (device hang or crash) via SIP INVITE commands with a long header field name sent during a call.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (2) EDB-27090 · dos · Jan 15, 2006 · verified
- CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (1) EDB-27089 · dos · Jan 11, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- ADV-2006-0259 vdb-entry
- http://blog.donews.com/zwell/archive/2006/01/17/698810.aspx
- 20060116 CounterPath eyeBeam Handing SIP header Vulnerabilities mailing-list
- 16253 vdb-entry
- eyebeam-sip-header-bo(24181) vdb-entry
- 18516 third-party-advisory
- 354 third-party-advisory
- 20060921 Re: CounterPath eyeBeam Handing SIP header Vulnerabilities mailing-list