CVE-2003-1115

The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.

• http://www.cert.org/advisories/CA-2003-06.htmlThird Party Advisory, US Government Resource
• http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/Exploit
• http://www.kb.cert.org/vuls/id/528719Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/6904Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11379
• http://www.cert.org/advisories/CA-2003-06.htmlThird Party Advisory, US Government Resource
• http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/Exploit
• http://www.kb.cert.org/vuls/id/528719Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/6904Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11379

Published

Dec 31, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-1109The Session Initiation Protocol (SIP) implementation in mult…
• CVE-2003-1110The Session Initiation Protocol (SIP) implementation in Colu…
• CVE-2003-1111The Session Initiation Protocol (SIP) implementation in mult…
• CVE-2003-1112The Session Initiation Protocol (SIP) implementation in Inga…
• CVE-2003-1113The Session Initiation Protocol (SIP) implementation in IPTe…
• CVE-2003-1114The Session Initiation Protocol (SIP) implementation in Medi…
• CVE-2003-1116The communications protocol for the Report Review Agent (RRA…
• CVE-2003-1117Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and R…
• CVE-2003-1118Buffer overflow in the SETI@home client 3.03 and other versi…
• CVE-2003-1119SSH Secure Shell before 3.2.9 allows remote attackers to cau…
• CVE-2003-1120Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix…
• CVE-2003-1121Services in ScriptLogic 4.01, and possibly other versions be…