PT-2004-1268 · Nortel Networks · Nortel Networks Bcm+2

Published 2004-01-15 · Updated 2008-09-05 · CVE-2004-0056

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Nortel Networks Business Communications Manager (BCM) (affected versions not specified) Succession 1000 IP Trunk and IP Peer Networking (affected versions not specified) 802.11 Wireless IP Gateway (affected versions not specified)

Description The issue affects the H.323 protocol implementation, allowing remote attackers to cause a denial of service and possibly execute arbitrary code. This is demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0056

Affected Products

802.11 Wireless Ip Gateway

Nortel Networks Bcm

Succession 1000 Ip Trunk/Ip Peer Networking

References · 6

• http://cert.org/advisories/CA-2004-01.html · Patch
• http://kb.cert.org/vuls/id/749342 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-0056 · Security Note
• http://securityfocus.com/bid/9406 · Note
• http://securitytracker.com/id?1008687 · Note
• http://uniras.gov.uk/vuls/2004/006489/h323.htm · Note