CVE-2003-1110: High severity Columbia University Sipc vulnerability
Published Dec 31, 2003
·Updated
The Session Initiation Protocol (SIP) implementation in Columbia SIP User Agent (sipc) 1.74 and other versions before sipc 2.0 build 2003-02-21 allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Affected Software
1 affected component
Columbia University Sipc=1.74
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Columbia SIP User Agent (sipc)to a version that resolves this vulnerability.Fixed in sipc 2.0 build 2003-02-21
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Mar 11, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description