NVD

Id
57703  
Name
CVE-2007-5640  
Description
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-10-23  
Modified Date
2008-11-15  
Seq
2007-5640  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
295291 57703 CVE-2007-5640 3274  View
295292 57703 CVE-2007-5640 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654641  View
295293 57703 CVE-2007-5640 http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_forced_re-authentication_v1.0.txt  View
295294 57703 CVE-2007-5640 20071018 Nortel IP Phone forced re-authentication  View
295295 57703 CVE-2007-5640 26124  View
295296 57703 CVE-2007-5640 nortel-ipphone-register-dos(37254)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55875 JVNDB-2007-004567 IP Phone シリーズの Nortel 製品における呼び出しをブロックされる脆弱性 IP Phone シリーズの Nortel UNIStim IP Softphone 2050、IP Phone 1140E、および Business Communications Manager (BCM)、Mobile Voice Client、およびその他の製品ラインには、呼び出しをブロックされる、および再登録を強制される脆弱性が存在します。 CVE-2007-5640 28995 CVE-2007-5640 57703 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004567.html 2007-10-23 2012-09-25 View