Description
Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.
References
- 23978 third-party-advisory
- 20070131 SIP Packet Reloads IOS Devices Not Configured for SIP vendor-advisory
- 1017575 vdb-entry
- http://www.cisco.com/warp/public/707/cisco-air-20070131-sip.shtml
- 22330 vdb-entry
- cisco-sip-packet-dos(31990) vdb-entry
- oval:org.mitre.oval:def:5138 vdb-entry signature
- ADV-2007-0428 vdb-entry
- VU#438176 third-party-advisory