PT-2009-2034 · Nortel · Nortel Communication Server 1000

Publicado 2009-03-31 · Atualizado 2017-08-17 · CVE-2008-6564

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nortel Communication Server 1000 (affected versions not specified)

Description The issue concerns the Nortel UNIStim protocol, which is used in Communication Server 1000 and other products. It uses predictable sequence numbers, allowing remote attackers to hijack sessions via sniffing or brute force attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2008-6564

Produtos afetados

Nortel Communication Server 1000

Referências · 8

• http://secunia.com/advisories/29747 · Nota
• http://securityfocus.com/bid/28691 · Nota
• http://securitytracker.com/id?1019847 · Nota
• http://osvdb.org/44379 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41801 · Nota
• http://voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC · Nota
• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6564 · Nota de Segurança