CVE-2003-1109

Cisco IOS - Denial of Service and Remote Code Execution via Crafted SIP INVITE Messages

Title source: llm

Description

The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/11379

Exploit x_refsource_misc

http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1006145

Patch vendor-advisory x_refsource_cisco

http://www.cisco.com/warp/public/707/cisco-sa-20030221-protos.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1006144

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/528719

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

http://www.cert.org/advisories/CA-2003-06.html

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/6904

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1006143

Scores

EPSS 0.0679

EPSS Percentile 93.3%

Details

Status published

Products (50)

cisco/ios 12.2\(1\)xa

cisco/ios 12.2\(1\)xd

cisco/ios 12.2\(1\)xd1

cisco/ios 12.2\(1\)xd3

cisco/ios 12.2\(1\)xd4

cisco/ios 12.2\(1\)xe

cisco/ios 12.2\(1\)xe2

cisco/ios 12.2\(1\)xe3

cisco/ios 12.2\(1\)xh

cisco/ios 12.2\(1\)xq

... and 40 more

Published Dec 31, 2003

Tracked Since Feb 18, 2026