Unscored severity · published Nov 7, 2008
CVE-2008-4999
Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death")
–
CVSS
3.8%
EPSS
No
On KEV
Description
Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce the issue.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UI
Unistim IP Phone · Nortel
0604das · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4999
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4999
securityreason.com
http://securityreason.com/securityalert/4568
www.securityfocus.com
http://www.securityfocus.com/archive/1/488782/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/488801/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/488803/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/28004
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/40993