Unscored severity · published Jan 8, 2009
CVE-2008-5872
Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100 3.0.13 allow remote attackers to cause a denial of service (device outage) via a UFTP message that has a negative block size or other crafted Connection Details values.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Multimedia Communication Server 5100 · Nortel
3.0.13 · source: NVD
Affected product
MC
Multimedia Communication Server 5100
Nortel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5872
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5872
Vendor Advisory
http://secunia.com/advisories/32203
Vendor Advisory
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=774845
voipshield.com
http://voipshield.com/research-details.php?id=120
www.securityfocus.com
http://www.securityfocus.com/bid/31633
www.vupen.com
http://www.vupen.com/english/advisories/2008/2779
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45751
More from Multimedia Communication Server 5100
–
CVE-2008-5871
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls,…