CVE-2008-6564

EUVD-2008-6527
Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to hijack sessions via sniffing or brute force attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.6 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
Affected Products (NVD)
VendorProductVersion
nortelcommunication_server_1000
*
nortelunistim_protocol
*
𝑥
= Vulnerable software versions
References
http://osvdb.org/44379
http://secunia.com/advisories/29747
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
http://www.securityfocus.com/bid/28691
http://www.securitytracker.com/id?1019847
http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC
https://exchange.xforce.ibmcloud.com/vulnerabilities/41801
http://osvdb.org/44379
http://secunia.com/advisories/29747
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
http://www.securityfocus.com/bid/28691
http://www.securitytracker.com/id?1019847
http://www.voipshield.com/research-details.php?id=27&s=4&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC
https://exchange.xforce.ibmcloud.com/vulnerabilities/41801