Unscored severity · published Apr 1, 2009
CVE-2008-6576
Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes,…
–
CVSS
2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service (resource exhaustion and failed updates) via unknown vectors that causes consumption of all available sessions.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cs1000 · Nortel
4.50 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6576
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6576
osvdb.org
http://osvdb.org/44380
secunia.com
http://secunia.com/advisories/29747
securitytracker.com
http://securitytracker.com/id?1019845
Vendor Advisory
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455
www.securityfocus.com
http://www.securityfocus.com/bid/28691
www.voipshield.com
http://www.voipshield.com/research-details.php?id=11
More from Cs1000
–
CVE-2008-6579
Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators."
–
CVE-2008-6578
Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive…
–
CVE-2008-6577
Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows…