What’s Vulnerable › Vulnerabilities

CVE-2003-1109

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-12-31 · updated 2026-06-16

Description

The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.

Affected products

• Cisco IOS: 12.2(1)xa, 12.2(1)xd, 12.2(1)xd1, 12.2(1)xd3, 12.2(1)xd4, 12.2(1)xe (+51)
• Cisco Ip Phone 7940: all versions
• Cisco Ip Phone 7960: all versions
• Cisco Pix Firewall Software: 5.2(1), 5.2(2), 5.2(3.210), 5.2(5), 5.2(6), 5.2(7) (+10)

References

• http://www.cert.org/advisories/CA-2003-06.html
• http://www.cisco.com/warp/public/707/cisco-sa-20030221-protos.shtml
• http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/
• http://www.kb.cert.org/vuls/id/528719
• http://www.securityfocus.com/bid/6904
• http://www.securitytracker.com/id?1006143
• http://www.securitytracker.com/id?1006144
• http://www.securitytracker.com/id?1006145
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11379
• http://www.cert.org/advisories/CA-2003-06.html
• http://www.cisco.com/warp/public/707/cisco-sa-20030221-protos.shtml
• http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/

Get alerted when CVE-2003-1109 or the next vulnerability affects your stack