Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Multimedia_communication_server_5100 | Nortel | 3.0.13 (including) | 3.0.13 (including) |
References
- http://secunia.com/advisories/32203
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=775223
- http://voipshield.com/research-details.php?id=119
- http://www.securityfocus.com/bid/31640
- http://www.vupen.com/english/advisories/2008/2779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45752
- http://secunia.com/advisories/32203
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=775223
- http://voipshield.com/research-details.php?id=119
- http://www.securityfocus.com/bid/31640
- http://www.vupen.com/english/advisories/2008/2779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45752