Lucene search

K
cve[email protected]CVE-2003-1111
HistoryMar 11, 2005 - 5:00 a.m.

CVE-2003-1111

2005-03-1105:00:00
web.nvd.nist.gov
22
sip
dynamicsoft
denial of service
remote attackers
arbitrary code
invite messages
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.

Affected configurations

NVD
Node
dynamicsoftappengine

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

Related for CVE-2003-1111