PT-2010-2336 · Cisco · Cisco Ios

Published 2010-03-24 · Updated 2010-04-13 · CVE-2010-0579

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.3 through 12.4

Description The SIP implementation in Cisco IOS allows remote attackers to cause a denial of service via a malformed SIP message. Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation that could allow an unauthenticated, remote attacker to cause a reload of an affected device when SIP operation is enabled. Remote code execution may also be possible.

Recommendations For devices running Cisco IOS versions 12.3 through 12.4, update to a newer version that addresses these vulnerabilities. For devices that must run SIP, there are no workarounds; however, mitigations are available to limit exposure of the vulnerabilities. As a temporary workaround, consider disabling SIP operation until a patch is available. Restrict access to SIP to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-0579

Affected Products

Cisco Ios

References · 6

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100324-sip · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0579 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b20f32.shtml · Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=20063 · Vendor Advisory
• http://secunia.com/advisories/39068 · Note
• http://securitytracker.com/id?1023744 · Note