Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

sip-tester can crash or run code from crafted SIP

CVE-2008-1959 · published 18 years ago
Summary

The sip-tester tool in Debian version 3.0 can be tricked by a specially formatted SIP message to overwrite memory. This can cause the program to stop working or, in rare cases, allow an attacker to run their own commands on the server. Update to the latest package or apply the vendor's security patch to stop the problem.

What to do
  • Update debian sip-tester to version 2.0.1-1.2.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian sip-tester < 2.0.1-1.2
Fix: upgrade to 2.0.1-1.2
Debian:13 debian sip-tester < 2.0.1-1.2
Fix: upgrade to 2.0.1-1.2
Debian:14 debian sip-tester < 2.0.1-1.2
Fix: upgrade to 2.0.1-1.2
– sipp sipp 3.0
cpe:2.3:a:sipp:sipp:3.0:*:*:*:*:*:*:*
Original advisory text
Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafte...
Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SIP message. NOTE: some of these details are obtained from third party information.
References
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published25 Apr 2008
Updated4 Nov 2026
First seen20 Sep 2026
Sources
DEBIAN-CVE-2008-1959 · OSV
CVE-2008-1959 · NVD
Track software like this
Free during beta