medium5.0Public exploit code
CVE-2012-1008
OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OfficeSIP Server 3.1 - Denial of Service2012-02-02 · dos · windows · Verified
Impact
OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Officesip | Officesip Server | Version 3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secpod.org/advisories/SecPod_Exploit_OfficeSIP_Server_DOS_Vuln.txt
- http://secpod.org/blog/?p=461
- http://secpod.org/exploits/SecPod_Exploit_OfficeSIP_Server_DOS.py
- http://www.exploit-db.com/exploits/18453
- http://secpod.org/advisories/SecPod_Exploit_OfficeSIP_Server_DOS_Vuln.txt
- http://secpod.org/blog/?p=461
- http://secpod.org/exploits/SecPod_Exploit_OfficeSIP_Server_DOS.py
- http://www.exploit-db.com/exploits/18453