PT-2007-6649 · Nortel · Wlan Handsets+4

Published 2007-10-23 · Updated 2018-10-15 · CVE-2007-5639

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nortel UNIStim IP Softphone 2050 (affected versions not specified) Nortel IP Phone 1140E (affected versions not specified) Other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in a device hang. This is achieved by flooding the device with Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.

Recommendations For Nortel UNIStim IP Softphone 2050, consider restricting access to the Signaling Server to minimize the risk of exploitation. For Nortel IP Phone 1140E, restrict the handling of Mute and UnMute messages from unverified sources. For other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products, limit the processing of messages with spoofed source IP addresses for the Signaling Server. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2007-5639

Affected Products

Iphone

Ip Phone 1140E

Mobile Voice Client

Unistim Ip Softphone 2050

Wlan Handsets

References · 7

• 🔥 http://csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt · Exploit
• http://securityfocus.com/bid/26122 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5639 · Security Note
• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654715 · Patch
• http://securityreason.com/securityalert/3273 · Note
• http://securityfocus.com/archive/1/482480/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37253 · Note