CVE-2007-0648

Severity

78%

Complexity

99%

Confidentiality

115%

Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.

Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.

CVSS 2.0 Base Score 7.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:C).

Overview

Type

Cisco IOS

First reported 18 years ago

2007-02-01 01:28:00

Last updated 7 years ago

2017-10-11 01:31:00

Affected Software

Cisco IOS 12.3 (14)T

12.3\(14\)t

Cisco IOS 12.3 (14)T2

12.3\(14\)t2

Cisco IOS 12.3 (14)T4

12.3\(14\)t4

Cisco IOS 12.3 (14)T5

12.3\(14\)t5

Cisco IOS 12.3YG

12.3yg

Cisco IOS 12.3YK

12.3yk

Cisco IOS 12.3YM

12.3ym

Cisco IOS 12.3YQ

12.3yq

Cisco IOS 12.3YT

12.3yt

Cisco IOS 12.3YU

12.3yu

Cisco IOS 12.3YX

12.3yx

Cisco IOS 12.4

12.4

Cisco IOS 12.4 (1)

12.4\(1\)

Cisco IOS 12.4 (1b)

12.4\(1b\)

Cisco IOS 12.4 (1c)

12.4\(1c\)

Cisco IOS 12.4 (2)MR

12.4\(2\)mr

Cisco IOS 12.4 (2)MR1

12.4\(2\)mr1

Cisco IOS 12.4 (2)T

12.4\(2\)t

Cisco IOS 12.4 (2)T1

12.4\(2\)t1

Cisco IOS 12.4 (2)T2

12.4\(2\)t2

Cisco IOS 12.4 (2)T3

12.4\(2\)t3

Cisco IOS 12.4(2)T4

12.4\(2\)t4

Cisco IOS 12.4 (2)XA

12.4\(2\)xa

Cisco IOS 12.4 (2)XB

12.4\(2\)xb

Cisco IOS 12.4(2)XB2

12.4\(2\)xb2

Cisco IOS 12.4 (3)

12.4\(3\)

Cisco IOS 12.4(3)T2

12.4\(3\)t2

Cisco IOS 12.4 (3a)

12.4\(3a\)

Cisco IOS 12.4 (3b)

12.4\(3b\)

Cisco IOS 12.4(3d)

12.4\(3d\)

Cisco IOS 12.4(4)MR

12.4\(4\)mr

Cisco IOS 12.4 (4)T

12.4\(4\)t

Cisco IOS 12.4(4)T2

12.4\(4\)t2

Cisco IOS 12.4 (5)

12.4\(5\)

Cisco IOS 12.4(5b)

12.4\(5b\)

Cisco IOS 12.4(6)T

12.4\(6\)t

Cisco IOS 12.4(6)T1

12.4\(6\)t1

Cisco IOS 12.4(7)

12.4\(7\)

Cisco IOS 12.4(7a)

12.4\(7a\)

Cisco IOS 12.4(8)

12.4\(8\)

Cisco IOS 12.4(9)T

12.4\(9\)t

Cisco IOS 12.4MR

12.4mr

Cisco IOS 12.4SW

12.4sw

Cisco IOS 12.4T

12.4t

Cisco IOS 12.4XA

12.4xa

Cisco IOS 12.4XB

12.4xb

Cisco IOS 12.4XC

12.4xc

Cisco IOS 12.4XD

12.4xd

Cisco IOS 12.4XE

12.4xe

Cisco IOS 12.4XG

12.4xg

Cisco IOS 12.4XJ

12.4xj

Cisco IOS 12.4XP

12.4xp

Cisco IOS 12.4XT

12.4xt

References

23978

Vendor Advisory

1017575

http://www.cisco.com/warp/public/707/cisco-air-20070131-sip.shtml

Vendor Advisory

20070131 SIP Packet Reloads IOS Devices Not Configured for SIP

Patch, Vendor Advisory

VU#438176

Patch, US Government Resource

22330

ADV-2007-0428

cisco-sip-packet-dos(31990)

oval:org.mitre.oval:def:5138

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.