The Session Initiation Protocol (SIP) implementation in IPTel SIP Express Router 0.8.9 and previous versions allows remote malicious users to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
iptel sip express router 0.8.9 |
||
iptel sip express router 0.8.8 |