CVE-2008-6576 - Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communi

CVE-2008-6576

Summary

Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service (resource exhaustion and failed updates) via unknown vectors that causes consumption of all available sessions.

References

Vulnerable Configurations

cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*
cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*

CVSS

Base:	7.8 (as of 17-08-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:C

refmap via4

bid	28691
confirm	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
misc	http://www.voipshield.com/research-details.php?id=11
osvdb	44380
sectrack	1019845
secunia	29747
xf	nortel-ftp-dos(41804)

Last major update

17-08-2017 - 01:29

Published

01-04-2009 - 22:30

Last modified

17-08-2017 - 01:29