Description
By exploiting a flaw on the Avaya one-X Desktop Edition SIP softphone is it possible to cause a Denial of Service (DoS) against the individual softphone. No authentication is required to perform this DoS.
Recommendations
Avaya has acknowledged the issue and is working on correcting it. More details could be found in Avaya Security Advisory ASA-2008-370 at http://support.avaya.com/elmodocs2/security/ASA-2008-370.htm . In the short term it is recommended that a VoIP aware IPS product, such as VoIPguard, with signatures to detect attempts to exploit this issue, be implemented to prevent it from being exploited. Implementing best practices can limit the exposure of this issue by disallowing SIP access from unauthorized network locations. Implementing stronger authentication can assist in reducing the number of attackers in a position to exploit the issue, though requires additional system management effort. Avaya customers with a valid support agreement may wish to speak with their support contact in order to obtain further vendor details.