Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities (cisco-sa-20100922-sip)

This script is Copyright (C) 2010-2014 Tenable Network Security, Inc.


Synopsis :

The remote device is missing a vendor-supplied security patch.

Description :

Multiple vulnerabilities exist in the Session Initiation Protocol
(SIP) implementation in Cisco IOS Software that could allow an
unauthenticated, remote attacker to cause a reload of an affected
device when SIP operation is enabled. Cisco has released free software
updates that address these vulnerabilities. There are no workarounds
for devices that must run SIP
however, mitigations are available to
limit exposure to the vulnerabilities.

See also :

http://www.nessus.org/u?9ad087d2

Solution :

Apply the relevant patch referenced in Cisco Security Advisory
cisco-sa-20100922-sip.

Risk factor :

High / CVSS Base Score : 7.8
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)
CVSS Temporal Score : 6.4
(CVSS2#E:F/RL:OF/RC:C)
Public Exploit Available : true

Family: CISCO

Nessus Plugin ID: 49648 (cisco-sa-20100922-siphttp.nasl)

Bugtraq ID: 36152

CVE ID: CVE-2009-2051
CVE-2010-2835

Ready to Scan Unlimited IPs & Run Compliance Checks?

Upgrade to Nessus Professional today!

Buy Now

Combine the Power of Nessus with the Ease of Cloud

Start your free Nessus Cloud trial now!

Begin Free Trial