Vulnerabilities > CVE-2009-5139 - Use of Password Hash With Insufficient Computational Effort vulnerability in Google Gizmo5
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Packetstorm
| data source | https://packetstormsecurity.com/files/download/125965/phonerlite-disclose.txt |
| id | PACKETSTORM:125965 |
| last seen | 2016-12-05 |
| published | 2014-03-31 |
| reporter | Jason Ostrom |
| source | https://packetstormsecurity.com/files/125965/PhonerLite-2.14-Digest-Information-Leak.html |
| title | PhonerLite 2.14 Digest Information Leak |
Seebug
| bulletinFamily | exploit |
| description | No description provided by source. |
| id | SSV:85923 |
| last seen | 2017-11-19 |
| modified | 2014-07-01 |
| published | 2014-07-01 |
| reporter | Root |
| source | https://www.seebug.org/vuldb/ssvid-85923 |
| title | PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure |