[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-5638Date: (C)2007-10-23   (M)2023-12-22


The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages. NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE
  
Reference:
http://www.securityfocus.com/archive/1/482478/100/0/threaded
BID-26120
SECUNIA-27234
SREASON-3272
OSVDB-41770
http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt
nortel-ipphone-audiostream-spoofing(42881)
nortel-ipphone-unistim-audio-hijacking(37255)

CPE    23
cpe:/h:nortel:wlan_handset_6140
cpe:/a:nortel:mobile_voice_client_2050
cpe:/a:nortel:meridian_option_11c
cpe:/a:nortel:centrex_ip_client_manager
...
CWE    1
CWE-310

© SecPod Technologies