Denial of Service Vulnerability in Cisco IP Phone Models and IOS Versions

CVE-2003-1109

Summary

The Session Initiation Protocol (SIP) implementation in various Cisco products is susceptible to a denial of service condition. By sending specially crafted INVITE messages, remote attackers could potentially disrupt service to Cisco IP Phones and IOS versions. This vulnerability affects multiple models, including the Cisco IP Phone 7940 and 7960, as well as multiple versions of Cisco IOS. Exploitation could not only lead to a service disruption but may also allow the execution of arbitrary code, demonstrating the critical importance of addressing this vulnerability as outlined in the OUSPG PROTOS SIP test suite.

References