PT-2009-2034 · Nortel · Nortel Communication Server 1000

Published 2009-03-31 · Updated 2017-08-17 · CVE-2008-6564

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nortel Communication Server 1000 (affected versions not specified)

Description The issue concerns the Nortel UNIStim protocol, which is used in Communication Server 1000 and other products. It uses predictable sequence numbers, allowing remote attackers to hijack sessions via sniffing or brute force attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-6564

Affected Products

Nortel Communication Server 1000

References · 8

• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6564 · Security Note
• http://secunia.com/advisories/29747 · Note
• http://securityfocus.com/bid/28691 · Note
• http://securitytracker.com/id?1019847 · Note
• http://osvdb.org/44379 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41801 · Note
• http://voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC · Note