1. CVE-Search
  2. CVE-2007-5591
ID CVE-2007-5591
Summary The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service (telephony application outage) via a flood of packets to Embedded LAN (ELAN) ports.
References
Vulnerable Configurations
  • cpe:2.3:a:nortel:communications_server:1000e:*:*:*:*:*:*:*
    cpe:2.3:a:nortel:communications_server:1000e:*:*:*:*:*:*:*
  • cpe:2.3:a:nortel:communications_server:1000m:*:*:*:*:*:*:*
    cpe:2.3:a:nortel:communications_server:1000m:*:*:*:*:*:*:*
  • cpe:2.3:a:nortel:communications_server:1000s:*:*:*:*:*:*:*
    cpe:2.3:a:nortel:communications_server:1000s:*:*:*:*:*:*:*
  • cpe:2.3:a:nortel:meridian_option_11c:*:*:*:*:*:*:*:*
    cpe:2.3:a:nortel:meridian_option_11c:*:*:*:*:*:*:*:*
  • cpe:2.3:a:nortel:meridian_option_51c:*:*:*:*:*:*:*:*
    cpe:2.3:a:nortel:meridian_option_51c:*:*:*:*:*:*:*:*
  • cpe:2.3:a:nortel:meridian_option_61c:*:*:*:*:*:*:*:*
    cpe:2.3:a:nortel:meridian_option_61c:*:*:*:*:*:*:*:*
  • cpe:2.3:a:nortel:meridian_option_81c:*:*:*:*:*:*:*:*
    cpe:2.3:a:nortel:meridian_option_81c:*:*:*:*:*:*:*:*
  • cpe:2.3:a:nortel:voip-core-cs:1000e:*:enterprise:*:*:*:*:*
    cpe:2.3:a:nortel:voip-core-cs:1000e:*:enterprise:*:*:*:*:*
  • cpe:2.3:a:nortel:voip-core-cs:1000m:*:enterprise:*:*:*:*:*
    cpe:2.3:a:nortel:voip-core-cs:1000m:*:enterprise:*:*:*:*:*
  • cpe:2.3:a:nortel:voip-core-cs:1000s:*:enterprise:*:*:*:*:*
    cpe:2.3:a:nortel:voip-core-cs:1000s:*:enterprise:*:*:*:*:*
CVSS
Base: 7.8 (as of 15-10-2018 - 21:45)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 26113
bugtraq 20071018 Nortel Telephony Server Denial of Service
confirm
misc http://www.csnc.ch/static/advisory/csnc/nortel_telephony_server_denial_of_service_v1.0.txt
osvdb 41799
secunia 27282
vupen ADV-2007-3536
xf nortel-cs1000-elan-dos(37252)
Last major update 15-10-2018 - 21:45
Published 19-10-2007 - 23:17
Last modified 15-10-2018 - 21:45
Back to Top