First published: Wed Dec 31 2003(Updated: )
The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Nortel Succession Communication Server 2000 | ||
Nortel Succession Communication Server 2000 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-1115 is classified as a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
To mitigate CVE-2003-1115, ensure that you apply any available security patches or updates for Nortel Networks Succession Communication Server 2000.
CVE-2003-1115 enables remote attackers to send crafted INVITE messages that can lead to denial of service or code execution.
CVE-2003-1115 affects Norton Networks Succession Communication Server 2000 in both standard and compact configurations.
Yes, CVE-2003-1115 can be exploited remotely, allowing attackers to target vulnerable installations over the network.