Cisco IOS Session Initiation Protocol Register Denial of Service Vulnerability

Bugtraq ID:	45786
Class:	Unknown
CVE:	CVE-2010-4683
Remote:	Yes
Local:	No
Published:	Jan 12 2011 12:00AM
Updated:	Jan 12 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Ios 15.0(1)XA1 Cisco Ios 15.0(1)XA Cisco IOS 15.0(1)M2 Cisco IOS 15.0(1)M1 Cisco IOS 15.0(1)M1 Cisco IOS 15.0 M Cisco Ios 15.0
Not Vulnerable:	Cisco Ios 15.0(1)XA5

Cisco IOS Session Initiation Protocol Register Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

An attacker can exploit these issues to cause an affected device to crash, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCtg41733.

Cisco IOS Session Initiation Protocol Register Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS Session Initiation Protocol Register Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for more information.

Cisco IOS Session Initiation Protocol Register Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Release Notes for Cisco 800 Series Routers with Cisco IOS Release 15.0(1)XA (Cisco)