Vulnerabilities > CVE-2007-5639 - Unspecified vulnerability in Nortel IP Softphone 2050 and Mobile Voice Client 2050
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Hardware | Nortel
| 13 |
| Application | 2 |
References
- http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654715
- http://www.securityfocus.com/bid/26122
- http://securityreason.com/securityalert/3273
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37253
- http://www.securityfocus.com/archive/1/482480/100/0/threaded