SIP: ReSIProcate VoIP Overflow
This signature detects attempts to exploit a known vulnerability in ReSIProcate SIP stack. Sending an overly long INVITE or OPTIONS request to a VoIP gateway running ReSIProcate can cause either a denial of service (DoS) or can allow an attacker to take control of the gateway with the priviledges of the gateway process. Patches are available. This signature can trigger on non-malicious sessions from devices that send extra data. Use this signature only if you have a VoIP gateway running ReSIProcate installed in your network.
Short Name
VOIP:SIP:RESPR-INV-OPT-OF
Severity
Major
Recommended
False
Recommended Action
Drop
Category
VOIP
Keywords
Overflow ReSIProcate VoIP
Release Date
07/21/2008
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown