CVE-2003-1109
Summary
| CVE | CVE-2003-1109 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2003-12-31 05:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite. |
Risk And Classification
Primary CVSS: v2.0 7.5 from [email protected]
AV:N/AC:L/Au:N/C:P/I:P/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Ios | 12.2t | All | All | All |
| Operating System | Cisco | Ios | 12.2xa | All | All | All |
| Operating System | Cisco | Ios | 12.2xb | All | All | All |
| Operating System | Cisco | Ios | 12.2xc | All | All | All |
| Operating System | Cisco | Ios | 12.2xd | All | All | All |
| Operating System | Cisco | Ios | 12.2xe | All | All | All |
| Operating System | Cisco | Ios | 12.2xf | All | All | All |
| Operating System | Cisco | Ios | 12.2xg | All | All | All |
| Operating System | Cisco | Ios | 12.2xh | All | All | All |
| Operating System | Cisco | Ios | 12.2xi | All | All | All |
| Operating System | Cisco | Ios | 12.2xj | All | All | All |
| Operating System | Cisco | Ios | 12.2xk | All | All | All |
| Operating System | Cisco | Ios | 12.2xl | All | All | All |
| Operating System | Cisco | Ios | 12.2xm | All | All | All |
| Operating System | Cisco | Ios | 12.2xn | All | All | All |
| Operating System | Cisco | Ios | 12.2xq | All | All | All |
| Operating System | Cisco | Ios | 12.2xr | All | All | All |
| Operating System | Cisco | Ios | 12.2xs | All | All | All |
| Operating System | Cisco | Ios | 12.2xt | All | All | All |
| Operating System | Cisco | Ios | 12.2xw | All | All | All |
| Operating System | Cisco | Ios | 12.2\(11\)t | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xa | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xd | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xd1 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xd3 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xd4 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xe | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xe2 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xe3 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xh | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xq | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xs | All | All | All |
| Operating System | Cisco | Ios | 12.2\(1\)xs1 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)t4 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xa | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xa1 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xa5 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xb | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xb3 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xb4 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xf | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xg | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xh | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xh2 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xh3 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xi | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xi1 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xi2 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xj | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xj1 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xk | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xk2 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xn | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xt | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xt3 | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xu | All | All | All |
| Operating System | Cisco | Ios | 12.2\(2\)xu2 | All | All | All |
| Hardware | Cisco | Ip Phone 7940 | All | All | All | All |
| Hardware | Cisco | Ip Phone 7960 | All | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(3.210\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(5\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(6\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.2\(7\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(1.200\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 5.3\(3\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0 | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(1\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.0\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.1\(2\) | All | All | All |
| Operating System | Cisco | Pix Firewall Software | 6.2\(1\) | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| 2003 CERT Advisories | af854a3a-2127-422b-91ae-364da2661108 | www.cert.org | Third Party Advisory, US Government Resource |
| Cisco IOS Router SIP Protocol Bugs Let Remote Users Deny Service - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Cisco - Networking, Cloud, and Cybersecurity Solutions | af854a3a-2127-422b-91ae-364da2661108 | www.cisco.com | Patch |
| Cisco PIX Firewall SIP Protocol Bugs Let Remote Users Deny Service - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| CERT/CC Vulnerability Note VU#528719 | af854a3a-2127-422b-91ae-364da2661108 | www.kb.cert.org | Third Party Advisory, US Government Resource |
| www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip | af854a3a-2127-422b-91ae-364da2661108 | www.ee.oulu.fi | Exploit |
| Multiple Vendor Session Initiation Protocol Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Patch |
| Cisco IP Phone SIP Protocol Bugs Let Remote Users Deny Service - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.