CVE-2007-1820

Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove messages, or reconfigure the mailbox, by spoofing Calling Number Identification (CNID, aka Caller ID).

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2007-04-02

Last modified

2024-08-07

Affected products

• Callpilot (Nortel)
• Meridian Mail (Nortel)

References

• http://osvdb.org/34983
• http://www.kb.cert.org/vuls/id/726548
• http://www.kb.cert.org/vuls/id/AAMN-5N2QFX