CVE-2008-3210 rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daemon crash) via a SIP (1) INVITE or (2) OPTIONS message with a long domain name in...
MediumCVSS 5.0
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daemon crash) via a SIP (1) INVITE or (2) OPTIONS message with a long domain name in a request URI, which triggers an assert error.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| resiprocate | = 1.3.2 | No fix listed |
References
- labs.mudynamics.com exploit
- 31058 third-party-advisory vendor-advisory
- 4013 third-party-advisory
- www.resiprocate.org patch
- 30194 exploit vdb-entry
- resiprocate-dnsstub-dos(43770) vdb-entry
- 6046 exploit