CVE-2003-1109: High severity Cisco IOS vulnerability
The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
At the network perimeter and on SIP gateways, block, filter, or otherwise drop SIP INVITE messages from untrusted networks. Restrict SIP signaling to trusted peers using firewall/ACLs or SIP-aware gateways, and deploy SIP-aware IDS/IPS to detect and drop malformed INVITE messages (and/or rate-limit INVITE requests) to mitigate denial-of-service and exploitation attempts involving crafted INVITE messages.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1109?
The severity of CVE-2003-1109 is critical due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2003-1109?
To fix CVE-2003-1109, update the affected Cisco products to the latest available software versions provided by Cisco.
Which Cisco products are affected by CVE-2003-1109?
CVE-2003-1109 affects multiple Cisco products including IP Phone models 7940 and 7960, various versions of Cisco IOS, and Secure PIX Firewall versions.
What type of attack can exploit CVE-2003-1109?
CVE-2003-1109 can be exploited by sending crafted INVITE messages which may lead to a denial of service or arbitrary code execution.
Is there a patch available for CVE-2003-1109?
Yes, Cisco has released patches for CVE-2003-1109; affected users should apply these updates immediately.