CVE-2003-1109
published 2003-12-31CVE-2003-1109: The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and…
PriorityP432high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
6.79%
93.2th percentile
The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Affected
73 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Product Vulnerabilities Found by PROTOS SIP Test Suite
vendor_cisco·2003-02-22
CVE-2003-1109 CWE-119 Multiple Product Vulnerabilities Found by PROTOS SIP Test Suite
Multiple Product Vulnerabilities Found by PROTOS SIP Test Suite
Multiple Cisco products contain vulnerabilities in the processing of
Session Initiation Protocol (SIP) INVITE messages. These vulnerabilities were
identified by the University of Oulu Secure Programming Group (OUSPG) "PROTOS"
Test Suite for SIP and can be repeatedly exploited to produce a denial of
service.
This advisory is available at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030221-protos.
Cisco
Multiple Product Vulnerabilities Found by PROTOS SIP Test Suite
vendor_cisco
CVE-2003-1109 Multiple Product Vulnerabilities Found by PROTOS SIP Test Suite
CVE-2003-1109: Multiple Product Vulnerabilities Found by PROTOS SIP Test Suite
Multiple Cisco products contain vulnerabilities in the processing of Session Initiation Protocol (SIP) INVITE messages. These vulnerabilities were identified by the University of Oulu Secure Programming Group (OUSPG) "PROTOS" Test Suite for SIP and can be repeatedly exploited to produce a denial of service. This advisory is available at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030221-protos .
CWE: CWE-119, CWE-119
Bug IDs: CSCdz26317, CSCdz29003, CSCdz29033, CSCdz29041, CSCdz39284
GHSA
GHSA-cvf6-xm2v-cq3c: The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12
ghsa_unreviewed·2022-04-29
CVE-2003-1109 [HIGH] GHSA-cvf6-xm2v-cq3c: The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12
The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.cert.org/advisories/CA-2003-06.htmlhttp://www.cisco.com/warp/public/707/cisco-sa-20030221-protos.shtmlhttp://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/http://www.kb.cert.org/vuls/id/528719http://www.securityfocus.com/bid/6904http://www.securitytracker.com/id?1006143http://www.securitytracker.com/id?1006144http://www.securitytracker.com/id?1006145https://exchange.xforce.ibmcloud.com/vulnerabilities/11379http://www.cert.org/advisories/CA-2003-06.htmlhttp://www.cisco.com/warp/public/707/cisco-sa-20030221-protos.shtmlhttp://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/http://www.kb.cert.org/vuls/id/528719http://www.securityfocus.com/bid/6904http://www.securitytracker.com/id?1006143http://www.securitytracker.com/id?1006144http://www.securitytracker.com/id?1006145https://exchange.xforce.ibmcloud.com/vulnerabilities/11379
2003-12-31
Published