Nortel Networks Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone...

Design/Logic Flaw

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode."...

CVE-2007-5637

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode."...

CVE-2007-5637

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode."...

Nortel IP Phone Surveillance Mode

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Phone Vendor: Nortel Subject: IP Phone Surveillance Mode Risk: High Effect: Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: October, 18th 2007 Introduction: ------------- An IP phone can be put into...

Nortel Networks多个UNIStim VoIP产品远程窃听漏洞

Nortel IP Phones是一款IP电话应用方案。 Nortel IP Phones存在设计错误，远程攻击者可以利用漏洞对设备进行窃听，导致敏感信息泄露。 如果正确的UNIStim消息发送给IP电话，IP电话可进入surveillance模式，UNIStim消息ID必须匹配信号服务器和IP电话间的可预期ID，协议使用16位大小作为ID数字，如果恶意用户发送65536个所有可能ID号的伪造UNIStim消息，可导致消息被窃听，造成敏感信息泄露。 Nortel Networks Universal Access - IP 0 Nortel Networks Survivable...

Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities

Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to ope...

Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities

source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone. This will allow attackers to...