PT-2007-6648 · Nortel · Business Communications Manager+2

Daniel Stirnimann · Publicado 2007-10-23 · Atualizado 2018-10-15 · CVE-2007-5638

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nortel UNIStim IP Softphone 2050 (affected versions not specified) Nortel IP Phone 1140E (affected versions not specified) Other Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines (affected versions not specified)

Description The issue allows remote attackers to guess the RUDP ID and spoof messages due to the limited number of different values used in the 32-bit ID number field of an RUDP datagram. This can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

CWE-310

Identificadores relacionados

CVE-2007-5638

Produtos afetados

Business Communications Manager

Ip Phone 1140E

Unistim Ip Softphone 2050

Referências · 9

• 🔥 http://csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt · Exploit
• 🔥 http://securityfocus.com/bid/26120 · Exploit
• http://securityreason.com/securityalert/3272 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5638 · Nota de Segurança
• http://secunia.com/advisories/27234 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42881 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37255 · Nota
• http://osvdb.org/41770 · Nota
• http://securityfocus.com/archive/1/482478/100/0/threaded · Nota