ID CVE-2003-1108
Summary The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
References
Vulnerable Configurations
  • cpe:2.3:a:alcatel-lucent:omnipcx:5.0:-:linux
    cpe:2.3:a:alcatel-lucent:omnipcx:5.0:-:linux
CVSS
Base: 5.0 (as of 24-05-2005 - 09:25)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
oval via4
accepted 2008-09-08T04:00:49.911-04:00
class vulnerability
contributors
name Yuzheng Zhou
organization Hewlett-Packard
description The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
family ios
id oval:org.mitre.oval:def:5831
status accepted
submitted 2008-05-26T11:06:36.000-04:00
title Multiple Vendor Session Initiation Protocol Denial of Service Vulnerability
version 3
refmap via4
bid 6904
cert CA-2003-06
cert-vn VU#528719
misc http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/
xf sip-invite(11379)
Last major update 04-03-2009 - 00:19
Published 31-12-2003 - 00:00
Last modified 10-10-2017 - 21:29
Back to Top