CVE-2008-3800

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 26-09-2008 06:21

Last modified: - 02-06-2022 07:11

Total changes: - 2

Description

Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsu38644, a different vulnerability than CVE-2008-3801 and CVE-2008-3802.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:N/A:C

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

None

Integrity

Privileges required

Scope

User interaction

7.1

Base score

8.6

6.9

Exploitability score

Impact score

Verification logic

vendor=cisco AND product=unified_callmanager AND version=4.2

vendor=cisco AND product=unified_communications_manager AND version=5.0

vendor=cisco AND product=ios AND version=12.3

vendor=cisco AND product=unified_communications_manager AND version=6.1

vendor=cisco AND product=unified_callmanager AND version=4.1

vendor=cisco AND product=unified_callmanager AND version=4.3

vendor=cisco AND product=ios AND version=12.4

vendor=cisco AND product=unified_communications_manager AND version=4.1

vendor=cisco AND product=ios AND version=12.2

vendor=cisco AND product=unified_communications_manager AND version=5.1

Reference

20080924 Multiple Cisco IOS Session Initiation Protocol Denial of Service Vulnerabilities-Vendor Advisory
20080924 Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities-Vendor Advisory
31990-Third Party Advisory
32013-Third Party Advisory
31367-Third Party Advisory, VDB Entry
ADV-2008-2670-Permissions Required
ADV-2008-2671-Permissions Required
1020942-Broken Link, Third Party Advisory, VDB Entry
1020939-Broken Link, Third Party Advisory, VDB Entry
oval:org.mitre.oval:def:6086-Broken Link

Keywords

CVE-2008-3800

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2008-3800

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures