Browse CVEs

HIGH 10.0 CVE-2008-6577 Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts an… Cs1000 Mitigation only Fix from $1,9502009-04-01 HIGH 10.0 CVE-2008-6578 Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileg… Cs1000 No fix yet Fix from $1,9502009-04-01 HIGH 7.8 CVE-2008-6576 Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running o… Cs1000 Mitigation only Fix from $1,9502009-04-01 MEDIUM 5.0 CVE-2008-6579 Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to … Cs1000 Mitigation only Fix from $1,6002009-04-01 HIGH 7.6 CVE-2008-6564 Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses predictable sequence numbers, which allows remote attackers to… Communication Server 1000 Mitigation only Fix from $1,9502009-03-31 HIGH 7.8 CVE-2008-5872 Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communi… Multimedia Communication Server 5100 Mitigation only Fix from $1,9502009-01-08 MEDIUM 6.4 CVE-2008-5871 Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof an… Multimedia Communication Server 5100 Mitigation only Fix from $1,6002009-01-08 HIGH 7.8 CVE-2008-4999 Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE… Unistim Ip Phone No fix yet Fix from $1,9502008-11-07 MEDIUM 5.0 CVE-2008-3157 Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of… Sip Multimedia Pc Client Mitigation only Fix from $1,6002008-07-11 HIGH 7.5 CVE-2007-5636EPSS 7% Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute… Ip Softphone 2050 No fix yet Fix from $1,9502007-10-23 HIGH 7.8 CVE-2007-5591 The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11… Meridian Option 11c Mitigation only Fix from $1,9502007-10-19 HIGH 7.8 CVE-2007-3438 Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbi… Sip Softphone Mitigation only Fix from $1,9502007-06-27 HIGH 7.8 CVE-2007-3361 The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device crash) via a SIP message with … Pc Client Soft Phone Sip Mitigation only Fix from $1,9502007-06-22 HIGH 9.0 CVE-2007-2332 Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authentic… Vpn Router 1010 Mitigation only Fix from $1,9502007-04-27 HIGH 9.3 CVE-2007-1820 Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove me… Callpilot Mitigation only Fix from $1,9502007-04-02 HIGH 7.2 CVE-2005-2579 Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which … Contivity Mitigation only Fix from $1,9502005-08-16 MEDIUM 5.0 CVE-2004-2549EPSS 10% Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP reque… Wlan Access Point 2220 No fix yet Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2000-0221EPSS 5% The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port. Nautica Marlin Mitigation only Fix from $1,6002000-02-25 MEDIUM 5.0 CVE-2000-0063 cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the s… Contivity Mitigation only Fix from $1,6002000-01-17 MEDIUM 5.0 CVE-2000-0064 cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metac… Contivity Mitigation only Fix from $1,6002000-01-17 HIGH 7.2 CVE-2000-0009 The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute … Optivity Net Architect Mitigation only Fix from $1,9501999-12-29