Signature Detail

H225SGN: Protocol Implementation Vulnerabilities

This signature detects attempts to exploit a known vulnerability in the H.225SGN/H.323 protocol. A successful attack can lead to a buffer overflow and remote code execution.

Extended Description

Multiple vendor implementations of the H.323 protocol contain various vulnerabilities; these may range from simple denial of service to potential arbitrary code execution.

Affected Products

• Avaya Communication Manager 1.1.0
• Avaya Communication Manager 1.3.1
• Avaya Communication Manager 2.0.0
• Avaya SG203 4.31.29
• Avaya SG208
• Avaya SG5 4.2.0
• Avaya SG5 4.3.0
• Avaya SG5X 4.2.0
• Avaya SG5X 4.3.0
• Check Point Software Firewall-1 4.0.0 SP1
• Check Point Software Firewall-1 4.0.0 SP2
• Check Point Software Firewall-1 4.0.0 SP3
• Check Point Software Firewall-1 4.0.0 SP4
• Check Point Software Firewall-1 4.0.0 SP5
• Check Point Software Firewall-1 4.0.0 SP6
• Check Point Software Firewall-1 4.0.0 SP7
• Check Point Software Firewall-1 4.0.0 SP8
• Check Point Software Firewall-1 4.1.0
• Check Point Software Firewall-1 4.1.0 SP1
• Check Point Software Firewall-1 4.1.0 SP2
• Check Point Software Firewall-1 4.1.0 SP3
• Check Point Software Firewall-1 4.1.0 SP4
• Check Point Software Firewall-1 4.1.0 SP5
• Check Point Software Firewall-1 4.1.0 SP6
• Check Point Software Firewall-1 [ VPN + DES ] 4.1.0
• Check Point Software Firewall-1 [ VPN + DES + STRONG ] 4.1.0 Build 41439
• Check Point Software Firewall-1 [ VPN + DES + STRONG ] 4.1.0 SP2 Build 41716
• Check Point Software Next Generation FP1
• Check Point Software Next Generation FP2
• Check Point Software Next Generation FP3
• Check Point Software Next Generation FP3 HF1
• Check Point Software Next Generation FP3 HF2
• Check Point Software NG-AI
• Check Point Software Nokia Voyager 4.1
• Cisco ATA-186
• Cisco BTS 10200
• Cisco Call Manager 3.0.0
• Cisco Call Manager 3.1.0
• Cisco Call Manager 3.1.0 (2)
• Cisco Call Manager 3.1.0 (3a)
• Cisco Call Manager 3.2.0
• Cisco Call Manager 3.3.0
• Cisco Call Manager 3.3.0 (3)
• Cisco Conference Connection
• Cisco Internet Service Node
• Cisco IOS 11.3
• Cisco IOS 11.3.1
• Cisco IOS 11.3.11B
• Cisco IOS 11.3(11B)
• Cisco IOS 11.3(11B)T2
• Cisco IOS 11.3(11C)
• Cisco IOS 11.3(11D)
• Cisco IOS 11.3.1ED
• Cisco IOS 11.3.1T
• Cisco IOS 11.3(2)XA
• Cisco IOS 11.3(7)DB1
• Cisco IOS 11.3(8)DB2
• Cisco IOS 11.3AA
• Cisco IOS 11.3DA
• Cisco IOS 11.3DB
• Cisco IOS 11.3HA
• Cisco IOS 11.3MA
• Cisco IOS 11.3NA
• Cisco IOS 11.3T
• Cisco IOS 11.3WA4
• Cisco IOS 11.3XA
• Cisco IOS 12.0
• Cisco IOS 12.0(10)S3b
• Cisco IOS 12.0(10)S7
• Cisco IOS 12.0(10)S8
• Cisco IOS 12.0(11A)
• Cisco IOS 12.0(11)ST4
• Cisco IOS 12.0(12A)
• Cisco IOS 12.0(12)S3
• Cisco IOS 12.0(12)S4
• Cisco IOS 12.0(13A)
• Cisco IOS 12.0(13)S6
• Cisco IOS 12.0(13)S8
• Cisco IOS 12.0(14A)
• Cisco IOS 12.0(14)S7
• Cisco IOS 12.0(14)S8
• Cisco IOS 12.0(14)ST
• Cisco IOS 12.0(14)ST3
• Cisco IOS 12.0(15A)
• Cisco IOS 12.0(15)S3
• Cisco IOS 12.0(15)S6
• Cisco IOS 12.0(15)S7
• Cisco IOS 12.0(16.06)S
• Cisco IOS 12.0(16A)
• Cisco IOS 12.0(16)S10
• Cisco IOS 12.0(16)S8
• Cisco IOS 12.0(16)S8a
• Cisco IOS 12.0(16)ST
• Cisco IOS 12.0(16)ST1
• Cisco IOS 12.0(17)
• Cisco IOS 12.0(17A)
• Cisco IOS 12.0(17)S
• Cisco IOS 12.0(17)S4
• Cisco IOS 12.0(17)S7
• Cisco IOS 12.0(17)ST1
• Cisco IOS 12.0(17)ST5
• Cisco IOS 12.0(17)ST8
• Cisco IOS 12.0(18B)
• Cisco IOS 12.0(18)S
• Cisco IOS 12.0(18)S5
• Cisco IOS 12.0(18)S5a
• Cisco IOS 12.0(18)S7
• Cisco IOS 12.0(18)ST1
• Cisco IOS 12.0(19A)
• Cisco IOS 12.0(19)S
• Cisco IOS 12.0(19)S2
• Cisco IOS 12.0(19)S2a
• Cisco IOS 12.0(19)S4
• Cisco IOS 12.0(19)ST
• Cisco IOS 12.0(19)ST2
• Cisco IOS 12.0(19)ST6
• Cisco IOS 12.0(1)S
• Cisco IOS 12.0(1)ST
• Cisco IOS 12.0(20A)
• Cisco IOS 12.0(20)ST2
• Cisco IOS 12.0(20)ST6
• Cisco IOS 12.0(20)ST7
• Cisco IOS 12.0(21A)
• Cisco IOS 12.0(21)S
• Cisco IOS 12.0(21)S1
• Cisco IOS 12.0(21)S3
• Cisco IOS 12.0(21)S4a
• Cisco IOS 12.0(21)S5a
• Cisco IOS 12.0(21)S6
• Cisco IOS 12.0(21)S7
• Cisco IOS 12.0(21)ST
• Cisco IOS 12.0(21)ST6
• Cisco IOS 12.0(21)ST7
• Cisco IOS 12.0(22)S4
• Cisco IOS 12.0(22)S5
• Cisco IOS 12.0(23)S2
• Cisco IOS 12.0(23)S3
• Cisco IOS 12.0(24.2)S
• Cisco IOS 12.0(24)S1
• Cisco IOS 12.0(24)S2
• Cisco IOS 12.0(25.4)S1
• Cisco IOS 12.0(25)S1
• Cisco IOS 12.0(26)
• Cisco IOS 12.0(2B)
• Cisco IOS 12.0(3)
• Cisco IOS 12.0(3.2)
• Cisco IOS 12.0(3.3)S
• Cisco IOS 12.0(3.4)T
• Cisco IOS 12.0(3D)
• Cisco IOS 12.0(4)T
• Cisco IOS 12.0(5)S
• Cisco IOS 12.0(5)T
• Cisco IOS 12.0(5)T1
• Cisco IOS 12.0(5)XK
• Cisco IOS 12.0(5)XK2
• Cisco IOS 12.0(5)XN
• Cisco IOS 12.0(5)XN1
• Cisco IOS 12.0(6B)
• Cisco IOS 12.0(7.4)S
• Cisco IOS 12.0(7A)
• Cisco IOS 12.0(7)S1
• Cisco IOS 12.0(7)T
• Cisco IOS 12.0(7)T2
• Cisco IOS 12.0(7)T3
• Cisco IOS 12.0(8)
• Cisco IOS 12.0(8.0.2)S
• Cisco IOS 12.0(8A)
• Cisco IOS 12.0(8)S1
• Cisco IOS 12.0(9)
• Cisco IOS 12.0(9A)
• Cisco IOS 12.0(9)S
• Cisco IOS 12.0(9)S8
• Cisco IOS 12.0S
• Cisco IOS 12.0ST
• Cisco IOS 12.0T
• Cisco IOS 12.0XC
• Cisco IOS 12.0XD
• Cisco IOS 12.0XG
• Cisco IOS 12.0XH
• Cisco IOS 12.0XI
• Cisco IOS 12.0XJ
• Cisco IOS 12.0XK
• Cisco IOS 12.0XL
• Cisco IOS 12.0XN
• Cisco IOS 12.0XQ
• Cisco IOS 12.0XR
• Cisco IOS 12.0XT
• Cisco IOS 12.1
• Cisco IOS 12.1(1)
• Cisco IOS 12.1(10A)
• Cisco IOS 12.1(10)AA
• Cisco IOS 12.1(10)E
• Cisco IOS 12.1(10)E4
• Cisco IOS 12.1(10)EC1
• Cisco IOS 12.1(11)
• Cisco IOS 12.1(11B)
• Cisco IOS 12.1(11B)E
• Cisco IOS 12.1(11B)E12
• Cisco IOS 12.1(11)E
• Cisco IOS 12.1(11)EC
• Cisco IOS 12.1(12B)
• Cisco IOS 12.1(12C)E7
• Cisco IOS 12.1(12C)EC
• Cisco IOS 12.1(12)E
• Cisco IOS 12.1(13)
• Cisco IOS 12.1(13.4)E
• Cisco IOS 12.1(13)E3
• Cisco IOS 12.1(13)E7
• Cisco IOS 12.1(1.3)T
• Cisco IOS 12.1(14)E1
• Cisco IOS 12.1(14)E4
• Cisco IOS 12.1(18.4)
• Cisco IOS 12.1(19.3)E
• Cisco IOS 12.1(19)E
• Cisco IOS 12.1(19)EC
• Cisco IOS 12.1(1C)
• Cisco IOS 12.1(1)E5
• Cisco IOS 12.1(1)T
• Cisco IOS 12.1(20)
• Cisco IOS 12.1(20)E
• Cisco IOS 12.1(2B)
• Cisco IOS 12.1(2)E1
• Cisco IOS 12.1(3A)E7
• Cisco IOS 12.1(3A)E8
• Cisco IOS 12.1(3B)
• Cisco IOS 12.1(3)XI
• Cisco IOS 12.1(3)XP
• Cisco IOS 12.1(3)XP4
• Cisco IOS 12.1(3)XQ
• Cisco IOS 12.1(3)XT
• Cisco IOS 12.1(3)XT3
• Cisco IOS 12.1(4)
• Cisco IOS 12.1(4.3)T
• Cisco IOS 12.1(4A)
• Cisco IOS 12.1(4)E3
• Cisco IOS 12.1(4)XM4
• Cisco IOS 12.1(5A)E
• Cisco IOS 12.1(5C)E12
• Cisco IOS 12.1(5E)
• Cisco IOS 12.1(5)T
• Cisco IOS 12.1(5)T12
• Cisco IOS 12.1(5)T15
• Cisco IOS 12.1(5)T9
• Cisco IOS 12.1(5)XG5
• Cisco IOS 12.1(5)XM
• Cisco IOS 12.1(5)XM4
• Cisco IOS 12.1(5)XM7
• Cisco IOS 12.1(5)XR2
• Cisco IOS 12.1(5)XS
• Cisco IOS 12.1(5)XS2
• Cisco IOS 12.1(5)XU1
• Cisco IOS 12.1(5)XV
• Cisco IOS 12.1(5)XV3
• Cisco IOS 12.1(5)XV4
• Cisco IOS 12.1(5)XV5
• Cisco IOS 12.1(5)XY6
• Cisco IOS 12.1(5)YB
• Cisco IOS 12.1(5)YB4
• Cisco IOS 12.1(5)YB5
• Cisco IOS 12.1(5)YC
• Cisco IOS 12.1(5)YC1
• Cisco IOS 12.1(5)YC2
• Cisco IOS 12.1(5)YD
• Cisco IOS 12.1(5)YD2
• Cisco IOS 12.1(5)YD6
• Cisco IOS 12.1(5)YF
• Cisco IOS 12.1(5)YF2
• Cisco IOS 12.1(5)YF4
• Cisco IOS 12.1(5)YH
• Cisco IOS 12.1(5)YH3
• Cisco IOS 12.1(5)YI
• Cisco IOS 12.1(5)YI1
• Cisco IOS 12.1(6.5)EC3
• Cisco IOS 12.1(6A)
• Cisco IOS 12.1(6)E12
• Cisco IOS 12.1(6)E8
• Cisco IOS 12.1(6)EZ1
• Cisco IOS 12.1(6)EZ2
• Cisco IOS 12.1(7)
• Cisco IOS 12.1(7A)E6
• Cisco IOS 12.1(7B)
• Cisco IOS 12.1(7)EC
• Cisco IOS 12.1(8)
• Cisco IOS 12.1(8)AA1
• Cisco IOS 12.1(8A)E
• Cisco IOS 12.1(8B)E14
• Cisco IOS 12.1(8B)E8
• Cisco IOS 12.1(8B)E9
• Cisco IOS 12.1(8C)
• Cisco IOS 12.1(8)E
• Cisco IOS 12.1(9)
• Cisco IOS 12.1(9A)
• Cisco IOS 12.1(9)AA
• Cisco IOS 12.1(9)E
• Cisco IOS 12.1(9)E3
• Cisco IOS 12.1AA
• Cisco IOS 12.1E
• Cisco IOS 12.1EC
• Cisco IOS 12.1EZ
• Cisco IOS 12.1T
• Cisco IOS 12.1XA
• Cisco IOS 12.1XB
• Cisco IOS 12.1XC
• Cisco IOS 12.1XD
• Cisco IOS 12.1XG
• Cisco IOS 12.1XH
• Cisco IOS 12.1XI
• Cisco IOS 12.1XJ
• Cisco IOS 12.1XL
• Cisco IOS 12.1X(L)
• Cisco IOS 12.1XM
• Cisco IOS 12.1XP
• Cisco IOS 12.1XQ
• Cisco IOS 12.1XR
• Cisco IOS 12.1XT
• Cisco IOS 12.1XU
• Cisco IOS 12.1XV
• Cisco IOS 12.1XW
• Cisco IOS 12.1YB
• Cisco IOS 12.1YC
• Cisco IOS 12.1YD
• Cisco IOS 12.1YE
• Cisco IOS 12.1YF
• Cisco IOS 12.1YH
• Cisco IOS 12.1YI
• Cisco IOS 12.1YJ
• Cisco IOS 12.2
• Cisco IOS 12.2(1)
• Cisco IOS 12.2(1.1)
• Cisco IOS 12.2(11)T
• Cisco IOS 12.2(11)T3
• Cisco IOS 12.2(11)YX1
• Cisco IOS 12.2(11)YZ2
• Cisco IOS 12.2(12.02)S
• Cisco IOS 12.2(12.02)T
• Cisco IOS 12.2(12.05)
• Cisco IOS 12.2(12.05)S
• Cisco IOS 12.2(12.05)T
• Cisco IOS 12.2(12B)
• Cisco IOS 12.2(13A)
• Cisco IOS 12.2(13)MC1
• Cisco IOS 12.2(13)T1
• Cisco IOS 12.2(13)ZH
• Cisco IOS 12.2(14.5)
• Cisco IOS 12.2(14.5)T
• Cisco IOS 12.2(1.4)S
• Cisco IOS 12.2(14)S
• Cisco IOS 12.2(14)SX1
• Cisco IOS 12.2(14)SY1
• Cisco IOS 12.2(15.1)S
• Cisco IOS 12.2(15)T
• Cisco IOS 12.2(15)ZJ1
• Cisco IOS 12.2(15)ZL
• Cisco IOS 12.2(16.5)S
• Cisco IOS 12.2(16)BX
• Cisco IOS 12.2(18.2)
• Cisco IOS 12.2(1B)
• Cisco IOS 12.2(1D)
• Cisco IOS 12.2(1)DX
• Cisco IOS 12.2(1)S
• Cisco IOS 12.2(1)T
• Cisco IOS 12.2(1)XA
• Cisco IOS 12.2(1)XD
• Cisco IOS 12.2(1)XD1
• Cisco IOS 12.2(1)XD3
• Cisco IOS 12.2(1)XD4
• Cisco IOS 12.2(1)XH
• Cisco IOS 12.2(1)XQ
• Cisco IOS 12.2(1)XS
• Cisco IOS 12.2(1)XS1
• Cisco IOS 12.2(2.2)T
• Cisco IOS 12.2(2)DD3
• Cisco IOS 12.2(2)T4
• Cisco IOS 12.2(2)XA
• Cisco IOS 12.2(2)XA1
• Cisco IOS 12.2(2)XA5
• Cisco IOS 12.2(2)XB
• Cisco IOS 12.2(2)XB11
• Cisco IOS 12.2(2)XB3
• Cisco IOS 12.2(2)XB4
• Cisco IOS 12.2(2)XG
• Cisco IOS 12.2(2)XH
• Cisco IOS 12.2(2)XH2
• Cisco IOS 12.2(2)XH3
• Cisco IOS 12.2(2)XI
• Cisco IOS 12.2(2)XI1
• Cisco IOS 12.2(2)XI2
• Cisco IOS 12.2(2)XJ
• Cisco IOS 12.2(2)XJ1
• Cisco IOS 12.2(2)XK
• Cisco IOS 12.2(2)XK2
• Cisco IOS 12.2(2)XN
• Cisco IOS 12.2(2)XT
• Cisco IOS 12.2(2)XT3
• Cisco IOS 12.2(2)XU
• Cisco IOS 12.2(2)XU2
• Cisco IOS 12.2(3)
• Cisco IOS 12.2(3D)
• Cisco IOS 12.2(4)
• Cisco IOS 12.2(4)BX
• Cisco IOS 12.2(4)MX
• Cisco IOS 12.2(4)MX1
• Cisco IOS 12.2(4)T
• Cisco IOS 12.2(4)T3
• Cisco IOS 12.2(4)XL
• Cisco IOS 12.2(4)XL4
• Cisco IOS 12.2(4)XM
• Cisco IOS 12.2(4)XM2
• Cisco IOS 12.2(4)XW
• Cisco IOS 12.2(4)XW1
• Cisco IOS 12.2(4)YA
• Cisco IOS 12.2(4)YA1
• Cisco IOS 12.2(4)YB
• Cisco IOS 12.2(5)
• Cisco IOS 12.2(5D)
• Cisco IOS 12.2(6.8)T0a
• Cisco IOS 12.2(6.8)T1a
• Cisco IOS 12.2(6C)
• Cisco IOS 12.2(7)
• Cisco IOS 12.2(7.4)S
• Cisco IOS 12.2(7A)
• Cisco IOS 12.2(8)T
• Cisco IOS 12.2(8)YD
• Cisco IOS 12.2(8)YW2
• Cisco IOS 12.2(8)YY
• Cisco IOS 12.2(8)YY3
• Cisco IOS 12.2(8)ZB7
• Cisco IOS 12.2(9)S
• Cisco IOS 12.2B
• Cisco IOS 12.2BW
• Cisco IOS 12.2BX
• Cisco IOS 12.2DD
• Cisco IOS 12.2DX
• Cisco IOS 12.2MC
• Cisco IOS 12.2MX
• Cisco IOS 12.2S
• Cisco IOS 12.2SX
• Cisco IOS 12.2SY
• Cisco IOS 12.2T
• Cisco IOS 12.2XA
• Cisco IOS 12.2XB
• Cisco IOS 12.2XC
• Cisco IOS 12.2XD
• Cisco IOS 12.2XG
• Cisco IOS 12.2XH
• Cisco IOS 12.2XI
• Cisco IOS 12.2XJ
• Cisco IOS 12.2XK
• Cisco IOS 12.2XL
• Cisco IOS 12.2XM
• Cisco IOS 12.2XN
• Cisco IOS 12.2XQ
• Cisco IOS 12.2XR
• Cisco IOS 12.2XS
• Cisco IOS 12.2XT
• Cisco IOS 12.2XU
• Cisco IOS 12.2XW
• Cisco IOS 12.2YA
• Cisco IOS 12.2YB
• Cisco IOS 12.2YC
• Cisco IOS 12.2YD
• Cisco IOS 12.2YF
• Cisco IOS 12.2YG
• Cisco IOS 12.2YH
• Cisco IOS 12.2YJ
• Cisco IOS 12.2YK
• Cisco IOS 12.2YL
• Cisco IOS 12.2YM
• Cisco IOS 12.2YN
• Cisco IOS 12.2YT
• Cisco IOS 12.2YU
• Cisco IOS 12.2YV
• Cisco IOS 12.2YW
• Cisco IOS 12.2YX
• Cisco IOS 12.2YY
• Cisco IOS 12.2YZ
• Cisco IOS 12.2ZB
• Cisco IOS 12.2ZC
• Cisco IOS 12.2ZD
• Cisco IOS 12.2ZE
• Cisco IOS 12.2ZF
• Cisco IOS 12.2ZG
• Cisco IOS 12.2ZH
• Cisco IOS 12.2ZJ
• Cisco IOS 12.2ZL
• Cisco IOS 12.3T
• Cisco IP Phone 7905
• First Virtual Communications Click to Meet Express 1.0.0
• First Virtual Communications Click to Meet Express 1.0.0 2
• First Virtual Communications Click to Meet Express 2.0.0
• First Virtual Communications Click to Meet Express 2.1.0
• First Virtual Communications Click to Meet Express 2.2.0
• First Virtual Communications Click to Meet Premier Null
• First Virtual Communications Conference Server Null
• First Virtual Communications V-Gate 4000 Null
• First Virtual Communications V-Gate 5000 Null
• HP OpenCall MultiService Controller 1.1.0 Patch 37
• HP OpenCall MultiService Controller 1.1.0 Patch 46
• HP OpenCall MultiService Controller 1.2.0
• Intel NetStructure DMIP IP Boards Null
• Intel NetStructure Host Media Processing Software 1.0.0
• Intel NetStructure IPT IP Boards Null
• Intel NetStructure PBX-IP Media Gateway Null
• Microsoft ISA Server 2000 FP1
• Microsoft ISA Server 2000 SP1
• Microsoft ISA Server 2000
• Nortel Networks Business Communications Manager (BCM)
• Nortel Networks Succession 1000 Null
• Nortel Networks Wireless IP Gateway (802.11) Null
• pwlib 1.4.7
• pwlib 1.5.0 .0
• Red Hat Fedora Core1
• Red Hat Fedora Core2
• Red Hat Fedora Core3
• Red Hat Linux 9.0.0 I386
• Red Hat pwlib-1.2.12-3.i386.rpm Null
• Red Hat pwlib-1.3.3-5.i386.rpm Null
• Sun SunForum 3.2.0
• Sun SunForum 3D 1.0.0

References

• BugTraq: 9406
• CVE: CVE-2003-0819