CVEvulnerability
CVE-2008-5871
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-01-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-255
Description
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
Affected configurations
• nortel multimedia communication server 5100 3.0.13
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/32203 Vendor Advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223 support.nortel.com
- http://voipshield.com/research-details.php?id=119 voipshield.com
- http://www.securityfocus.com/bid/31640 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2779 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45752 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/32203 Vendor Advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223 support.nortel.com
- http://voipshield.com/research-details.php?id=119 voipshield.com
- http://www.securityfocus.com/bid/31640 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2779 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45752 exchange.xforce.ibmcloud.com