Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2007-10-23	CVE-2007-5638	Information Exposure vulnerability in Nortel products The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages. network nortel CWE-200	4.3
2007-10-23	CVE-2007-5637	Information Exposure vulnerability in Nortel products The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode." NOTE: issues relating to a small ID number space can be leveraged to make this attack easier. network nortel CWE-200	4.3
2007-05-30	CVE-2007-2886	Remote Denial of Service vulnerability in Nortel Communications Server 1000E/1000M/1000S Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service (card hang) via unspecified vectors. network low complexity nortel	5.0