CVE-2003-1110 in sipc

Riassunto

di MITRE

The Session Initiation Protocol (SIP) implementation in Columbia SIP User Agent (sipc) 1.74 and other versions before sipc 2.0 build 2003-02-21 allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 11/03/2005
• Divulgazione: 31/12/2003
• Moderazione: accettato
• Voce: VDB-21098
• CPE: pronto
• CWE: CWE-119 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.05310
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1110
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1110
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1110/