PT-2003-2068 · Mediatrix Telecom · Mediatrix Telecom Voip Access Devices/Gateways

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1114

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mediatrix Telecom VoIP Access Devices and Gateways versions SIPv2.4 through SIPv4.3

Description The issue affects the Session Initiation Protocol (SIP) implementation, allowing remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages. This has been demonstrated by the OUSPG PROTOS c07-sip test suite.

Recommendations For versions SIPv2.4 through SIPv4.3, consider disabling the SIP INVITE message handling until a patch is available to prevent potential denial of service or arbitrary code execution. Restrict access to the SIP implementation to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2003-1114

Produtos afetados

Mediatrix Telecom Voip Access Devices/Gateways

Referências · 6

• 🔥 http://ee.oulu.fi/research/ouspg/protos/testing/c07/sip · Exploit
• http://kb.cert.org/vuls/id/528719 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11379 · Nota
• http://securityfocus.com/bid/6904 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1114 · Nota de Segurança
• http://cert.org/advisories/CA-2003-06.html · Nota