Design/Logic Flaw

🗓️ 23 Oct 2007 17:46:00Reported by PRIOn knowledge baseType

The Nortel UNIStim softphone and IP phones have a security vulnerability due to a limited 32-bit ID number field in RUDP datagrams, making it easier for remote attackers to guess and spoof messages, potentially enabling eavesdropping attacks

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2007-5638	23 Oct 200717:00	–	cve
Cvelist	CVE-2007-5638	23 Oct 200717:00	–	cvelist
EUVD	EUVD-2007-5610	7 Oct 202500:30	–	euvd
NVD	CVE-2007-5638	23 Oct 200717:46	–	nvd

Source	Link
csnc	www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt
securityfocus	www.securityfocus.com/bid/26120
secunia	www.secunia.com/advisories/27234
securityreason	www.securityreason.com/securityalert/3272
osvdb	www.osvdb.org/41770
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/42881
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/37255
securityfocus	www.securityfocus.com/archive/1/482478/100/0/threaded

15 Oct 2018 21:45Current

7.2High risk

Vulners AI Score7.2

EPSS0.00631