Cisco IP Phone Session Initiation Protocol Denial of Service (CVE-2007-4459)

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.70, allows remote attackers to cause a denial of service device reboot via 1 a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or 2 a certain invalid SIP INVITE message that contains a remote...

CVE-2007-4459

Cisco IP Phone CVE-2007-4459 affects the 7940/7960 series with firmware up to P0S3-08-6-00 (and other SIP firmware before 8.7(0)). A remote, unauthenticated attacker on the voice VLAN can cause a denial of service resulting in a reboot by sending a specific sequence of malformed SIP messages (or ...