CVE-2006-0737

estara softphone < 3.0.1.47 - Denial of Service via SIP OPTIONS Request with Negative Expires Field

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0737. PoCs published by ZwelL.

AI-analyzed exploit summary This exploit demonstrates two denial-of-service vulnerabilities in eStara Smartphone by sending malformed SIP headers. The first uses a negative 'Expires' field, and the second uses an excessively large 'Content-Length' value to crash the device.

Description

eStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP OPTIONS request with a negative Expires field.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ZwelL · textdosmultiple

https://www.exploit-db.com/exploits/27211

View Code ZIP pw:eip

This exploit demonstrates two denial-of-service vulnerabilities in eStara Smartphone by sending malformed SIP headers. The first uses a negative 'Expires' field, and the second uses an excessively large 'Content-Length' value to crash the device.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: eStara Smartphone (version not specified)

No auth needed

Prerequisites: Network access to the target device · Ability to send crafted SIP packets

MITRE ATT&CK