[VOIPSEC] Actual Attacks - UA handling
Mark Teicher
mht3 at earthlink.net
Tue Mar 1 07:20:59 CST 2005
Just validating whether a VOIP's implementation allows for buffer overflow in a URI over a REGISTER request over UDP is possible.
Most UA should not accept a malicious request over 255 characters as the username, but some of the major player implementations do, and no configuration option to restrict how many characters a UA should accept.
/cheers
/
More information about the Voipsec
mailing list