NetSight
IP …
medium4.3

CVE-2007-5638

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other produc…

Impact

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages. NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.

Affected products

VendorProductAffected versions
NortelBusiness Communications Manager
Versions 50, 50a, 50e, 200, 400, 1000
NortelCentrex Ip Client Manager
All versions
NortelCentrex Ip Element Manager
All versions
NortelMeridian Option 11c
All versions
NortelMeridian Option 51c
All versions
NortelMeridian Option 61c
All versions
NortelMeridian Option 81c
All versions
NortelMeridian Sl100
Version cs2100
NortelMobile Voice Client 2050
All versions

Weakness classification

CWE-200CWE-310

References