CVE-2008-5872
Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100 3.0.13 allow remote attackers to cause a denial of service (device outage) via…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.92%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100 3.0.13 allow remote attackers to cause a denial of service (device outage) via a UFTP message that has a negative block size or other crafted Connection Details values.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 1.92% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- nortel/multimedia communication server 5100
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/32203Vendor Advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=774845Vendor Advisory
- http://voipshield.com/research-details.php?id=120
- http://www.securityfocus.com/bid/31633
- http://www.vupen.com/english/advisories/2008/2779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45751
- http://secunia.com/advisories/32203Vendor Advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=774845Vendor Advisory
- http://voipshield.com/research-details.php?id=120
- http://www.securityfocus.com/bid/31633
- http://www.vupen.com/english/advisories/2008/2779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45751
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.