PT-2008-5156 · Cisco · Cisco Ios

Published 2008-09-24 · Updated 2022-06-02 · CVE-2008-3802

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS (affected versions not specified)

Description Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS that can be exploited remotely to trigger a memory leak or to cause a reload of the IOS device. Cisco has released software updates that address these vulnerabilities. There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself, if administrators do not require the Cisco IOS device to provide voice over IP services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-3802

Affected Products

Cisco Ios

References · 7

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080924-sip · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3802 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml · Vendor Advisory
• http://secunia.com/advisories/31990 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5889 · Note
• http://securitytracker.com/id?1020939 · Note
• http://vupen.com/english/advisories/2008/2670 · Note