PT-2003-1854 · Digium · Asterisk

Published 2003-09-12 · Updated 2008-09-05 · CVE-2003-0761

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Asterisk versions prior to August 15, 2003

Description: The issue is related to a buffer overflow in the get msg text function of chan sip.c, which is part of the Session Initiation Protocol (SIP) implementation. This allows remote attackers to execute arbitrary code through specific requests, including MESSAGE or INFO requests.

Recommendations: For Asterisk versions prior to August 15, 2003, consider upgrading to a version released after August 15, 2003, to resolve the issue. As a temporary workaround, consider restricting access to the SIP protocol implementation to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-0761

Affected Products

Asterisk

References · 6

• 🔥 http://atstake.com/research/advisories/2003/a090403-1.txt · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0761 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0761 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0761 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0761 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0761 · Note