CVE-2004-0056
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.81%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 3.81% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- nortel/business communications manager · nortel/802.11 wireless ip gateway · nortel/succession communication server 1000
- Source
- cve@mitre.org
References
- http://www.cert.org/advisories/CA-2004-01.htmlPatch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/749342Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/9406
- http://www.securitytracker.com/id?1008687
- http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
- http://www.cert.org/advisories/CA-2004-01.htmlPatch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/749342Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/9406
- http://www.securitytracker.com/id?1008687
- http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.