CVEvulnerability
CVE-2008-6564
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Description
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks.
Affected configurations
• nortel communication server 1000
• nortel unistim protocol
References
- http://osvdb.org/44379 osvdb.org
- http://secunia.com/advisories/29747 secunia.com
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 Vendor Advisory
- http://www.securityfocus.com/bid/28691 www.securityfocus.com
- http://www.securitytracker.com/id?1019847 www.securitytracker.com
- http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC www.voipshield.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41801 exchange.xforce.ibmcloud.com
- http://osvdb.org/44379 osvdb.org
- http://secunia.com/advisories/29747 secunia.com
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 Vendor Advisory
- http://www.securityfocus.com/bid/28691 www.securityfocus.com
- http://www.securitytracker.com/id?1019847 www.securitytracker.com
- http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC www.voipshield.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41801 exchange.xforce.ibmcloud.com