CVE-2008-6564

Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks.

Score

CVSS 2.0 7.6 High

Status

Modified - cve@mitre.org

Published

2009-03-31

Last modified

2024-08-07

Affected products

• Communication Server 1000 (Nortel)
• Unistim Protocol (Nortel)

References

• http://osvdb.org/44379
• http://secunia.com/advisories/29747
• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
• http://www.securityfocus.com/bid/28691
• http://www.securitytracker.com/id?1019847
• http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&…
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41801