ID CVE-2008-3800
Summary Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsu38644, a different vulnerability than CVE-2008-3801 and CVE-2008-3802.
References
Vulnerable Configurations
  • cpe:2.3:a:cisco:unified_callmanager:4.2:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_callmanager:4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_callmanager:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_callmanager:4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_callmanager:4.3:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_callmanager:4.3:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*
CVSS
Base: 7.1 (as of 02-06-2022 - 17:11)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:C
oval via4
accepted 2010-06-21T04:00:02.561-04:00
class vulnerability
contributors
  • name Yuzheng Zhou
    organization Hewlett-Packard
  • name KASHIF LATIF
    organization DTCC
description Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsu38644, a different vulnerability than CVE-2008-3801 and CVE-2008-3802.
family ios
id oval:org.mitre.oval:def:6086
status accepted
submitted 2008-09-24T11:06:36.000-04:00
title Cisco IOS Session Initiation Protocol Denial of Service Vulnerability
version 9
refmap via4
bid 31367
cisco
  • 20080924 Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities
  • 20080924 Multiple Cisco IOS Session Initiation Protocol Denial of Service Vulnerabilities
sectrack
  • 1020939
  • 1020942
secunia
  • 31990
  • 32013
vupen
  • ADV-2008-2670
  • ADV-2008-2671
Last major update 02-06-2022 - 17:11
Published 26-09-2008 - 16:21
Last modified 02-06-2022 - 17:11
Back to Top