PT-2007-4638 · Nortel · Nortel Pc Client Sip Soft Phone

Published 2007-06-22 · Updated 2017-07-29 · CVE-2007-3361

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nortel PC Client SIP Soft Phone version 4.1 3.5.208[20051015]

Description The issue allows remote attackers to cause a denial of service, resulting in a device crash. This can be achieved by sending a SIP message with a malformed header.

Recommendations For Nortel PC Client SIP Soft Phone version 4.1 3.5.208[20051015], consider implementing validation checks on incoming SIP messages to prevent crashes due to malformed headers. As a temporary workaround, restrict access to the SIP functionality until a patch is available.

Fix

Related Identifiers

CVE-2007-3361

Affected Products

Nortel Pc Client Sip Soft Phone

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-3361 · Security Note
• http://vupen.com/english/advisories/2007/2319 · Note
• http://securityfocus.com/bid/24536 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35154 · Note
• http://osvdb.org/37498 · Note
• http://secunia.com/advisories/25782 · Note
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=298& · Note