CVE-2008-4999

Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service ...

7.8 HighPublic exploit

Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce the issue.

Exploit likelihood

3.83%Down 3.0 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2008-4999
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-4999
Updated: 2026-11-02

EUVDEUVD-2008-4978 No score

Record: EUVD-2008-4978
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2w53-4977-5w7j No score

Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service ...

Record: GHSA-2w53-4977-5w7j
Weakness: CWE-20
Updated: 2026-11-02

Affected products

nortel unistim ip phone

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Nortel UNIStim IP Phone - Remote Ping Denial of Service	2008-02-26

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-4999 is a high vulnerability (CVSS 7.8) in Nortel Unistim Ip Phone, published November 7, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.83%, the 90th percentile. No source names a fixed version.