CVE-2004-0054

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cert.org/advisories/CA-2004-01.htmlPatch, Third Party Advisory, US Government Resource
http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/749342Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/9406
http://www.securitytracker.com/id?1008685
http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4884
http://www.cert.org/advisories/CA-2004-01.htmlPatch, Third Party Advisory, US Government Resource
http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/749342Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/9406
http://www.securitytracker.com/id?1008685
http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4884

Timeline

Published: Feb 17, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-00555.0The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segment CVE-2004-00567.5Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP CVE-2004-00575.0The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a deni CVE-2004-00582.1Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_ant CVE-2004-00595.0Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary CVE-2004-00605.0WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash) via a large POST request.CVE-2004-00617.5WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with a trailing . (dot), o CVE-2004-00627.5Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negat CVE-2004-00637.5The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a di CVE-2004-00642.1The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files wi CVE-2004-00657.5Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2 CVE-2004-00665.0phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php, (