7.1

CVE-2007-5640

Exploit
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone.  NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nortel ≫ Business Communications Manager Version 50
Nortel ≫ Business Communications Manager Version 50a
Nortel ≫ Business Communications Manager Version 50e
Nortel ≫ Business Communications Manager Version 200
Nortel ≫ Business Communications Manager Version 400
Nortel ≫ Business Communications Manager Version 1000
Nortel ≫ Business Communications Manager Version srg50
Nortel ≫ Business Communications Manager Version srg200
Nortel ≫ Centrex Ip Client Manager
Nortel ≫ Centrex Ip Element Manager
Nortel ≫ Meridian Option 11c
Nortel ≫ Meridian Option 51c
Nortel ≫ Meridian Option 61c
Nortel ≫ Meridian Option 81c
Nortel ≫ Meridian Sl100 Version cs2100
Nortel ≫ Mobile Voice Client 2050
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.82% 0.759
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/27234
Vendor Advisory
http://osvdb.org/41772
http://securityreason.com/securityalert/3274
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654641
Patch
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt
Exploit
http://www.securityfocus.com/archive/1/482481/100/0/threaded
http://www.securityfocus.com/bid/26124
https://exchange.xforce.ibmcloud.com/vulnerabilities/37254