CVE-2003-0761

2022-10-0316:15:45

mitre

www.cve.org

buffer overflow

sip protocol

asterisk

remote attackers

arbitrary code

message

info requests

8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain (1) MESSAGE or (2) INFO requests.

References

www.atstake.com/research/advisories/2003/a090403-1.txt