Unscored severity · published Dec 31, 2003
CVE-2003-1109
The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to…
–
CVSS
6.8%
EPSS
No
On KEV
Description
The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
IP Phone 7940 · Cisco
All versions, or not specified · source: NVD
IP
IP Phone 7960 · Cisco
All versions, or not specified · source: NVD
IO
Ios · Cisco
12.2(1)xa; 12.2(1)xd; 12.2(1)xd1; 12.2(1)xd3; 12.2(1)xd4; 12.2(1)xe; +34 more · source: NVD
PF
Pix Firewall Software · Cisco
5.2(1); 5.2(2); 5.2(3.210); 5.2(5); 5.2(6); 5.2(7); +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1109
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1109
Third Party Advisory
http://www.cert.org/advisories/CA-2003-06.html
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20030221-protos.shtml
Exploit
http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/
Third Party Advisory
http://www.kb.cert.org/vuls/id/528719
Patch
http://www.securityfocus.com/bid/6904
www.securitytracker.com
http://www.securitytracker.com/id?1006143
More from Ios
9.8
CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
9.8
CVE-2017-12240
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
9.8
CVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability
8.8
CVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
8.8
CVE-2017-6738
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability