Cisco IOS SIP Multiple Denial of Service Vulnerabilities

Bugtraq ID:	31361
Class:	Unknown
CVE:	CVE-2008-3799 CVE-2008-3800 CVE-2008-3801 CVE-2008-3802
Remote:	Yes
Local:	No
Published:	Sep 24 2008 12:00AM
Updated:	Sep 24 2008 10:29PM
Credit:	The vendor disclosed these vulnerabilities.
Vulnerable:	Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XT Cisco IOS 12.4XP Cisco IOS 12.4XL Cisco IOS 12.4XJ Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4MR Cisco IOS 12.4 Cisco IOS 12.3ZA Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YG Cisco IOS 12.3YE Cisco IOS 12.3XZ Cisco IOS 12.3XY Cisco IOS 12.3XX Cisco IOS 12.3XW Cisco IOS 12.3XV Cisco IOS 12.3XU Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XL Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XH Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3XA Cisco IOS 12.3VA Cisco IOS 12.3TPC Cisco IOS 12.3T Cisco IOS 12.3B Cisco IOS 12.3 Cisco IOS 12.2ZP Cisco IOS 12.2ZL Cisco IOS 12.2ZJ Cisco IOS 12.2ZH Cisco IOS 12.2ZF Cisco IOS 12.2ZE Cisco IOS 12.2ZD Cisco IOS 12.2ZC Cisco IOS 12.2ZB Cisco IOS 12.2YY Cisco IOS 12.2YW Cisco IOS 12.2YV Cisco IOS 12.2YU Cisco IOS 12.2YT Cisco IOS 12.2YN Cisco IOS 12.2YM Cisco IOS 12.2YL Cisco IOS 12.2YJ Cisco IOS 12.2YH Cisco IOS 12.2YF Cisco IOS 12.2YD Cisco IOS 12.2YC Cisco IOS 12.2YB Cisco IOS 12.2YA Cisco IOS 12.2XW Cisco IOS 12.2XU Cisco IOS 12.2XT Cisco IOS 12.2XM Cisco IOS 12.2XB Cisco IOS 12.2TPC Cisco IOS 12.2T Cisco IOS 12.2MC Cisco IOS 12.2CZ Cisco IOS 12.2BY Cisco IOS 12.2BX Cisco IOS 12.2B
Not Vulnerable:	Cisco IOS 12.4(6)T11 Cisco IOS 12.4(4)XD11 Cisco IOS 12.4(20)T Cisco IOS 12.4(2)XB10 Cisco IOS 12.4(19)MR Cisco IOS 12.4(18) Cisco IOS 12.4(17b) Cisco IOS 12.4(15)XY3 Cisco IOS 12.4(15)XL2 Cisco IOS 12.4(15)T4 Cisco IOS 12.4(13f) Cisco IOS 12.4(11)XW7 Cisco IOS 12.3(8)YG7 Cisco IOS 12.3(2)XA7 Cisco IOS 12.3(14)YX12 Cisco IOS 12.3(14)YM13 Cisco IOS 12.3(11)YZ3 Cisco IOS 12.3(11)YK3 Cisco IOS 12.2(33)SB2 Cisco IOS 12.2(15)MC2c Cisco IOS 12.2(11)YV1

Cisco IOS SIP Multiple Denial of Service Vulnerabilities

Devices running Cisco IOS with SIP enabled are prone to multiple denial-of-service vulnerabilities.

These issues are tracked by the following Cisco bug IDs and CVEs:

CSCse56800 (CVE-2008-3799)
CSCsg91306 (CVE-2008-3800)
CSCsl62609 (CVE-2008-3801)
CSCsk42759 (CVE-2008-3802)

An attacker can exploit these issues to deny service to legitimate users.

Cisco IOS SIP Multiple Denial of Service Vulnerabilities

To exploit these issues, attackers use readily available utilities for generating SIP messages.

Cisco IOS SIP Multiple Denial of Service Vulnerabilities

Solution:
A vendor advisory and updates are available. See the references for more information.

Cisco IOS SIP Multiple Denial of Service Vulnerabilities

References:

• Cisco IOS Software (Cisco Systems)
  
• Cisco Security Advisory: Multiple Cisco IOS Session Initiation Protocol Denial o (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Multiple Cisco IOS Session Initiation Protocol Denial o (Cisco)