CVE-2007-5638

{"id": "CVE-2007-5638", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-10-23T17:46:00.000", "references": [{"url": "http://osvdb.org/41770", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27234", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/3272", "source": "cve@mitre.org"}, {"url": "http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_surveillance_mode_v1.0.txt", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/482478/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/26120", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37255", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42881", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-310"}]}], "descriptions": [{"lang": "en", "value": "The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages. NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages."}, {"lang": "es", "value": "El Nortel UNIStim IP Softphone 2050, IP Phone 1140E, y productos adicionales Nortel desde el IP Phone, Business Communications Manager (BCM), y otras l\u00edneas de productos, utilizan solamente diferentes valores 65536 en el campo n\u00famero ID de 32-bit de un datagrama RUDP, lo cual hace m\u00e1s f\u00e1cil a los atacantes remotos adivinar el RUDP ID y mensajes falsos. NOTA: esto podr\u00eda solaparse con un ataque espia a trav\u00e9s del env\u00edo de mensajes Audio Stream."}], "lastModified": "2018-10-15T21:45:52.847", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nortel:multimedia_communication_server_5100:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C924E0F3-999C-4B2B-BFD9-24BDBE4BABA5"}, {"criteria": "cpe:2.3:a:nortel:multimedia_communication_server_5200:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0EBEF64C-2B98-4961-8E2A-C59EA894FE0F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nortel:communications_server:1000e:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0EDBAFA1-329A-4321-990F-9B0972D286E8"}, {"criteria": "cpe:2.3:a:nortel:communications_server:1000m:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9559937B-8F87-49AB-B572-2DB3477CB1BB"}, {"criteria": "cpe:2.3:a:nortel:communications_server:1000s:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FA45C92F-3CDF-41A3-BD3F-E9725338E61F"}, {"criteria": "cpe:2.3:a:nortel:communications_server:2100:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6D7FC9EB-4BF5-45C2-A260-ADF4CC218700"}, {"criteria": "cpe:2.3:h:nortel:ip_audio_conference_phone_2033:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F3725D9C-E702-45F8-A647-BAA86EA060C6"}, {"criteria": "cpe:2.3:h:nortel:ip_phone_1110:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DC7EA846-6B58-4F88-91B2-770388BE5E2C"}, {"criteria": "cpe:2.3:h:nortel:ip_phone_1120e:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D9593EEF-CAC3-455B-972D-5DD2FE4802C2"}, {"criteria": "cpe:2.3:h:nortel:ip_phone_1140e:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F1482953-C22F-4FA7-B262-52B136F578CB"}, {"criteria": "cpe:2.3:h:nortel:ip_phone_1150e:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "64B644B1-F5B9-4420-9908-CB4770B3F600"}, {"criteria": "cpe:2.3:h:nortel:ip_phone_2001:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "645B8DCD-27BB-46B2-A41E-4EBC0674AD4C"}, {"criteria": "cpe:2.3:h:nortel:ip_phone_2002:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D52E4B37-7699-41D0-A9B7-965A01808607"}, {"criteria": "cpe:2.3:h:nortel:ip_phone_2004:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BD0A3FFE-C169-4C4B-8DDD-B5EFA9ACE238"}, {"criteria": "cpe:2.3:h:nortel:ip_phone_2007:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "76E5B7F9-8163-441D-8900-1FD60AC3579C"}, {"criteria": "cpe:2.3:h:nortel:wlan_handset_2210:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C7F1EFF9-42CB-4F10-940F-E397ED56D423"}, {"criteria": "cpe:2.3:h:nortel:wlan_handset_2211:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2A490C36-F529-4448-A8DE-BE2C74041E19"}, {"criteria": "cpe:2.3:h:nortel:wlan_handset_2212:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D7A9DC40-0269-403C-8D86-4EE094C5493E"}, {"criteria": "cpe:2.3:h:nortel:wlan_handset_6120:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "54772D2C-5460-4C63-A22A-DBBC497BFBA6"}, {"criteria": "cpe:2.3:h:nortel:wlan_handset_6140:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "52D18F26-40F0-4041-95B0-6A2153DD1261"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nortel:business_communications_manager:50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF498EA6-EF04-43A1-9627-E4B77928AAA2"}, {"criteria": "cpe:2.3:a:nortel:business_communications_manager:50a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04BB4BDA-893E-4912-9323-3F225435AE7F"}, {"criteria": "cpe:2.3:a:nortel:business_communications_manager:50e:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6C8AB15-D6F2-4F06-81BB-9D54F692CA24"}, {"criteria": "cpe:2.3:a:nortel:business_communications_manager:200:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F49ECAF3-0922-4C6B-A991-93504457668A"}, {"criteria": "cpe:2.3:a:nortel:business_communications_manager:400:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E34503FD-5462-4D07-B626-A0061EDB6DC8"}, {"criteria": "cpe:2.3:a:nortel:business_communications_manager:1000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2401C82A-BC79-435D-B921-FEE8DD3129C7"}, {"criteria": "cpe:2.3:a:nortel:business_communications_manager:srg50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D29C329-4026-459C-A8F0-67BEF104FCFC"}, {"criteria": "cpe:2.3:a:nortel:business_communications_manager:srg200:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A91B8617-7E5F-4373-8A8F-B27F4F3B1699"}, {"criteria": "cpe:2.3:a:nortel:centrex_ip_client_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6B037DA-B11F-41DA-A63A-7FFB88794BD5"}, {"criteria": "cpe:2.3:a:nortel:centrex_ip_element_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE819C43-881A-4209-BC25-B0CDF08313F0"}, {"criteria": "cpe:2.3:a:nortel:meridian_option_11c:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C791034-CF75-4779-AB1B-DF7A67361A85"}, {"criteria": "cpe:2.3:a:nortel:meridian_option_51c:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5D5C794-DF6D-492F-B34B-CDBB364C7168"}, {"criteria": "cpe:2.3:a:nortel:meridian_option_61c:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9CBF345-9D72-459A-ADA2-33DE3A25D156"}, {"criteria": "cpe:2.3:a:nortel:meridian_option_81c:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B726AC5D-3270-40D8-9783-F068A682A82D"}, {"criteria": "cpe:2.3:a:nortel:meridian_sl100:cs2100:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6B42739-60EB-4A93-85B6-1A95DF36BD51"}, {"criteria": "cpe:2.3:a:nortel:mobile_voice_client_2050:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48E2627D-3244-4A66-9EF6-B790EEFD0D4A"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}