CVE-2003-0761

Published: Sep 17, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain (1) MESSAGE or (2) INFO requests.

Affected (1)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.2.13

References (2)

http://www.atstake.com/research/advisories/2003/a090403-1.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.atstake.com/research/advisories/2003/a090403-1.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.