Undocumented TCP/9090 leaks information on phone configuration.
vulners.com/securityvulns/securityvulns:doc:11071