NetSight
IP …
high7.1

CVE-2007-5640

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Cli…

Impact

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server that has a spoofed source IP address for the phone. NOTE: the attack is more disruptive if a new spoofed resume message is sent after each re-registration.

Affected products

VendorProductAffected versions
NortelBusiness Communications Manager
Versions 50, 50a, 50e, 200, 400, 1000
NortelCentrex Ip Client Manager
All versions
NortelCentrex Ip Element Manager
All versions
NortelMeridian Option 11c
All versions
NortelMeridian Option 51c
All versions
NortelMeridian Option 61c
All versions
NortelMeridian Option 81c
All versions
NortelMeridian Sl100
Version cs2100
NortelMobile Voice Client 2050
All versions

References