PT-2008-5155 · Cisco · Cisco Ios

Publicado 2008-09-24 · Atualizado 2022-06-02 · CVE-2008-3801

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS (affected versions not specified)

Description Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS that can be exploited remotely to trigger a memory leak or to cause a reload of the IOS device. Cisco has released software updates that address these vulnerabilities. There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself, if administrators do not require the Cisco IOS device to provide voice over IP services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2008-3801

Produtos afetados

Cisco Ios

Referências · 12

• http://secunia.com/advisories/31990 · Nota
• http://securitytracker.com/id?1020942 · Nota
• http://securitytracker.com/id?1020939 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080924-sip · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a0080a0156a.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/31367 · Nota
• http://vupen.com/english/advisories/2008/2671 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6047 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3801 · Nota de Segurança
• http://secunia.com/advisories/32013 · Nota
• http://vupen.com/english/advisories/2008/2670 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml · Aviso do Fabricante