CVE-2007-5638 (Business Communications Manager, Meridian-Core-Option, Meridian SL100, - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

HeapOverflow Computer Security Community & Forums : Heap Overflow.com

		HeapOverflow Computer Security Community & Forums : Heap Overflow.com > Computer Security: Discussions > Advisories
CVE-2007-5638 (Business Communications Manager, Meridian-Core-Option, Meridian SL100,

Mark Forums Read

Notices

Welcome to you visitor! This community is mainly dedicated to the computer and security, if you're looking for DFind scanner or others exploits codes you will find them into the Projects section, feel free to start Blogging and remember to always keep an eye and start talking about security Advisories & public Exploits.

Advisories Discuss about all newly security flaws classed by CVE entries and reviewed by security experts

CVE-2007-5638 (Business Communications Manager, Meridian-Core-Option, Meridian SL100,

This is a discussion on "CVE-2007-5638 (Business Communications Manager, Meridian-Core-Option, Meridian SL100," within the Advisories part of the Computer Security: Discussions section; The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP ...

Reply

1 links from elsewhere to this Post. Click to view.

#1 (permalink)

Old

25-10-07

Heap is offline

Reporter

Join Date: Oct 2007

Posts: 12,469

Thanks: 0

Thanked 5 Times in 5 Posts

Rep Power: 2497

Heap is on a distinguished road

nvd

CVE-2007-5638 (Business Communications Manager, Meridian-Core-Option, Meridian SL100,

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to guess the RUDP ID and spoof messages. NOTE: this can be leveraged for an eavesdropping attack by sending many Open Audio Stream messages.

More...

Reply With Quote

Sponsor

Advertiser

Reply

Tags
business, communications, cve20075638, manager, meridian, meridiancoreoption, sl100

« - | CVE-2007-5651 (CatOS, IOS) »

LinkBacks (?) LinkBack to this Thread: http://heapoverflow.com/f0rums/advisories/1508-cve-2007-5638-business-communications-manager-meridian-core-option-meridian-sl100.html
Posted By	For	Type	Date
business - Members and Communities tagged with business - Zoints	This thread	Refback	25-01-08 17:27

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
CVE-2007-5640 (Business Communications Manager, Meridian-Core-Option, Meridian SL100,	Heap	Advisories	1	17-03-09 12:18
CVE-2007-5637 (Business Communications Manager, Meridian-Core-Option, Meridian SL100,	Heap	Advisories	0	25-10-07 03:08

heapoverflow.com - SEOmeter SEO tools

Locations of visitors to this page

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110