CVE-2012-1008 OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.

MediumCVSS 5.0 EPSS 11.2% PoC

Published: 2012-02-08 04:00
Updated: 2026-06-17 02:38
Exploit status: Proof-of-concept only

Sign in for asset impact Search another CVE

Description

OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.

Affected products

Product	Affected versions	Fixed in
officesip server	= 3.1	No fix listed

References

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 11.18% (percentile 96.0)
CWE: CWE-20

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

OfficeSIP Server 3.1 - Denial of Service PoC · Exploit Database (OffSec) · 2012-02-02