CVE-2003-1109

CWE-119 — Buffer Overflow4 documents4 sources
Severity
7.5HIGH
EPSS
24.7%
top 3.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOSCisco PIX Firewall Software
Timeline
PublishedDec 31
Latest updateApr 29

Description

The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDcisco/ios57 versions+56
▶NVDcisco/pix_firewall_software16 versions+15

Patches

Patch: www.cisco.com ↗Patch: www.securityfocus.com ↗Patch: www.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cvf6-xm2v-cq3c: The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12↗2022-04-29
▶
CVEList
CVE-2003-1109: The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12↗2005-03-11
▶

📋Vendor Advisories

1
Cisco
Multiple Product Vulnerabilities Found by PROTOS SIP Test Suite↗2003-02-22
▶
CVE-2003-1109 (HIGH CVSS 7.5) | The Session Initiation Protocol (SI | cvebase.io