Remote Code Execution and Denial of Service Vulnerability in IPTel SIP Express Router

Remote Code Execution and Denial of Service Vulnerability in IPTel SIP Express Router

CVE-2003-1113 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The Session Initiation Protocol (SIP) implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.

Learn more about our Web Application Penetration Testing UK.