CVEvulnerability
CVE-2003-0761
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-09-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain (1) MESSAGE or (2) INFO requests.
Affected configurations
• digium asterisk 1.2.13
References
- http://www.atstake.com/research/advisories/2003/a090403-1.txt Exploit, Vendor Advisory
- http://www.atstake.com/research/advisories/2003/a090403-1.txt Exploit, Vendor Advisory