Educause Security Discussion mailing list archives

H.323 vul can affect network core components


From: REN-ISAC <dodpears () INDIANA EDU>
Date: Tue, 13 Jan 2004 09:36:02 -0500

A H.323 protocol-level vulnerability can be exploited to produce a denial of service attack. The vulnerable devices 
include network core components such as firewalls, routers, and proxies that are configured for VoIP and 
videoconferencing support - e.g. a firewall that is configured to dynamically open ports for H.323 or a router that 
provides H.323 gatekeeper.

For more information:
http://www.uniras.gov.uk/vuls/2004/006489/h323.htm

Cisco's reference:
http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtml

CERT is tracking as: VU#749342
http://www.kb.cert.org/vuls/id/749342

Regards,

Doug Pearson
REN-ISAC
http://www.ren-isac.net

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: