CVE-2008-3157: Undefined Security Weakness

Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service resource consumption via a large number of sessions...

Nortel SIP多媒体PC客户端会话处理拒绝服务漏洞

Nortel Networks公司推出的SIP多媒体PC客户端是一个功能全面的多媒体即时通讯工具。 SIP多媒体PC客户端没有限制可生成的连接或活动窗口的数量，未经认证的远程攻击者可以创建大量会话，直到系统无法处理，导致耗尽客户端系统上的可用资源。 Nortel Networks 多媒体PC客户端SIP电话 4.x Novell ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.novell.com/security-alerts...

CVE-2008-2218: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server MCS before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service crash via a flood of "extraneous" messages, as demonstrated by the Nessus "Generic flood" denial of servic...