CVE-2008-3800

Cisco Unified Communications Manager 4.1-6.1 and IOS 12.2-12.4 - Denial of Service via SIP Message Processing

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsu38644, a different vulnerability than CVE-2008-3801 and CVE-2008-3802.

References (10)

Core 10
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31990
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31367
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32013
Permissions Required vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2670
Permissions Required vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2671
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1020942
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1020939

Scores

EPSS 0.0351
EPSS Percentile 88.0%

Details

Status published
Products (10)
cisco/ios 12.2
cisco/ios 12.3
cisco/ios 12.4
cisco/unified_callmanager 4.1
cisco/unified_callmanager 4.2
cisco/unified_callmanager 4.3
cisco/unified_communications_manager 4.1
cisco/unified_communications_manager 5.0
cisco/unified_communications_manager 5.1
cisco/unified_communications_manager 6.1
Published Sep 26, 2008
Tracked Since Feb 18, 2026