Description (CNA)
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41801
- http://osvdb.org/44379
- http://secunia.com/advisories/29747
- http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC
- http://www.securityfocus.com/bid/28691
- http://www.securitytracker.com/id?1019847
ADP enrichment
No English description supplied.
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41801
- http://osvdb.org/44379
- http://secunia.com/advisories/29747
- http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC
- http://www.securityfocus.com/bid/28691
- http://www.securitytracker.com/id?1019847