Back to search
CVE-2007-5638
Published: Oct 23, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages. NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
nortel-ipphone-unistim-audio-hijacking(37255)
vdb-entry
x_refsource_XF
27234
third-party-advisory
x_refsource_SECUNIA
41770
vdb-entry
x_refsource_OSVDB
nortel-ipphone-audiostream-spoofing(42881)
vdb-entry
x_refsource_XF
3272
third-party-advisory
x_refsource_SREASON
20071018 Nortel IP Phone Surveillance Mode
mailing-list
x_refsource_BUGTRAQ
26120
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now