CVE-2008-3802: High severity cisco ios vulnerability

Published Sep 26, 2008

Updated

Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801.

Affected Software

85 affected components

Cisco IOS=12.3ym

Cisco IOS=12.3yq

Cisco IOS=12.3xr

Cisco IOS=12.4t

Cisco IOS=12.2cz

Cisco IOS=12.3xg

Cisco IOS=12.4xj

Cisco IOS=12.2zp

Cisco IOS=12.3xd

Cisco IOS=12.4xl

Cisco IOS=12.3xw

Cisco IOS=12.4mr

Cisco IOS=12.2b

Cisco IOS=12.4xt

Cisco IOS=12.3xi

Cisco IOS=12.2yn

Cisco IOS=12.2xb

Cisco IOS=12.2yf

Cisco IOS=12.2ym

Cisco IOS=12.2yw

Cisco IOS=12.3yu

Cisco IOS=12.2yd

Cisco IOS=12.3xj

Cisco IOS=12.3t

Cisco IOS=12.2yb

Cisco IOS=12.3

Cisco IOS=12.2zh

Cisco IOS=12.2yv

Cisco IOS=12.2xw

Cisco IOS=12.3va

Cisco IOS=12.2t

Cisco IOS=12.2zc

Cisco IOS=12.3xz

Cisco IOS=12.2yt

Cisco IOS=12.2yl

Cisco IOS=12.4xv

Cisco IOS=12.4xw

Cisco IOS=12.2zb

Cisco IOS=12.2xu

Cisco IOS=12.3xf

Cisco IOS=12.3xl

Cisco IOS=12.3yk

Cisco IOS=12.3yf

Cisco IOS=12.4xd

Cisco IOS=12.4xp

Cisco IOS=12.2xm

Cisco IOS=12.3yt

Cisco IOS=12.3xb

Cisco IOS=12.2zj

Cisco IOS=12.3yz

Cisco IOS=12.3yg

Cisco IOS=12.3xu

Cisco IOS=12.2zd

Cisco IOS=12.3xy

Cisco IOS=12.3xc

Cisco IOS=12.4

Cisco IOS=12.2tpc

Cisco IOS=12.3xe

Cisco IOS=12.2yc

Cisco IOS=12.2ze

Cisco IOS=12.3tpc

Cisco IOS=12.4xa

Cisco IOS=12.2yy

Cisco IOS=12.3za

Cisco IOS=12.2yu

Cisco IOS=12.4xe

Cisco IOS=12.3yx

Cisco IOS=12.2bx

Cisco IOS=12.3xq

Cisco IOS=12.2zl

Cisco IOS=12.3ys

Cisco IOS=12.2zf

Cisco IOS=12.3b

Cisco IOS=12.2ya

Cisco IOS=12.4xb

Cisco IOS=12.3xx

Cisco IOS=12.4xy

Cisco IOS=12.4xc

Cisco IOS=12.3xa

Cisco IOS=12.3xk

Cisco IOS=12.2yj

Cisco IOS=12.2mc

Cisco IOS=12.2by

Cisco IOS=12.2yh

Cisco IOS=12.2xt

Event History

Sep 26, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3802?

CVE-2008-3802 is classified as a high-severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2008-3802?

To fix CVE-2008-3802, upgrade your Cisco IOS to a version that is not affected by this vulnerability.

What systems are affected by CVE-2008-3802?

CVE-2008-3802 affects multiple versions of Cisco IOS, specifically versions 12.2 through 12.4, when VoIP is configured.

Can CVE-2008-3802 allow remote attacks?

Yes, CVE-2008-3802 allows remote attackers to send valid SIP messages that can trigger a device reload.

What type of attack does CVE-2008-3802 facilitate?

CVE-2008-3802 facilitates denial of service attacks on devices running vulnerable versions of Cisco IOS.