Lucene search

MitreCVE-2003-1113

HistoryMar 11, 2005 - 5:00 a.m.

CVE-2003-1113

2005-03-1105:00:00

mitre

web.nvd.nist.gov

sip

iptel

sip express router

cve-2003-1113

remote code execution

denial of service

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.028

Percentile

90.7%

JSON

The Session Initiation Protocol (SIP) implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.

Affected configurations

Nvd

Node

iptelsip_express_routerMatch0.8.8

iptelsip_express_routerMatch0.8.9

VendorProductVersionCPE
iptelsip_express_router0.8.8cpe:2.3:h:iptel:sip_express_router:0.8.8:*:*:*:*:*:*:*
iptelsip_express_router0.8.9cpe:2.3:h:iptel:sip_express_router:0.8.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
iptel	sip_express_router	0.8.8	cpe:2.3:h:iptel:sip_express_router:0.8.8:::::::*
iptel	sip_express_router	0.8.9	cpe:2.3:h:iptel:sip_express_router:0.8.9:::::::*

References

www.cert.org/advisories/CA-2003-06.html

www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/

www.iptel.org/ser/security/

www.kb.cert.org/vuls/id/528719

www.securityfocus.com/bid/6904

exchange.xforce.ibmcloud.com/vulnerabilities/11379

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.028

Percentile

90.7%

JSON

Related for CVE-2003-1113