Signature Detail
Short Name |
VOIP:SIP:BYE-AUTH |
|---|---|
Severity |
High |
Recommended |
No |
Category |
VOIP |
Keywords |
bye auth sip password hash |
Release Date |
2009/06/02 |
Update Number |
1434 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SIP: BYE-AUTH Hash Disclosure
This signature detects attempts to exploit a known vulnerability against the SIP protocol statement allowing the disclosure of hashed passwords. A successful attack can provide an attacker with valid administrative credentials for your SIP device, resulting in complete control of the device.
References