|
|
| |
Credit:
The original article can be found at: http://www.cisco.com/warp/public/707/cisco-sa-20100922-sip.shtml
|
| |
Vulnerable Systems:
* Cisco IOS Software with SIP voice services enabled
Immune Systems:
* Cisco IOS XR Software
Three vulnerabilities exist in the SIP implementation in Cisco IOS Software that may allow a remote attacker to cause an affected device to reload. These vulnerabilities are triggered when the device running Cisco IOS Software processes crafted SIP messages. Successful exploitation of the vulnerabilities in this advisory may result in a reload of the device. Repeated exploitation could result in a sustained denial of service condition.
Patch Availability:
Please refer to section "Software Versions and Fixes" at:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-sip.shtml
CVE Information:
CVE-2010-2835
CVE-2009-2051
CVE-2010-2834
Disclosure Timeline:
2010-September-22 Public Release
|
|
|