PT-2003-2069 · Nortel Networks · Nortel Networks Succession Communication Server 2000

Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-1115

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Nortel Networks Succession Communication Server 2000 (affected versions not specified)

Description The issue concerns the Session Initiation Protocol (SIP) implementation when using SIP-T, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-1115

Affected Products

Nortel Networks Succession Communication Server 2000

References · 6

• 🔥 http://ee.oulu.fi/research/ouspg/protos/testing/c07/sip · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1115 · Security Note
• http://securityfocus.com/bid/6904 · Patch
• http://kb.cert.org/vuls/id/528719 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11379 · Note
• http://cert.org/advisories/CA-2003-06.html · Note