CVE-2008-5871
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call...
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
Exploit likelihood
What each source reports
NVD Score used
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
- Record
CVE-2008-5871- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
- Record
CVE-2008-5871- Updated
- 2026-11-02
EUVDEUVD-2008-5841 No score
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
- Record
EUVD-2008-5841- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vmvq-qvxq-35v9 No score
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call...
Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command.
- Record
GHSA-vmvq-qvxq-35v9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5871 is a medium vulnerability (CVSS 6.4) in Nortel Multimedia Communication Server 5100, published January 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.61%, the 76th percentile. No source names a fixed version.
References
voipshield.com/research-details.php?id=119
securityfocus.com/bid/31640
secunia.com/advisories/32203
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223
exchange.xforce.ibmcloud.com/vulnerabilities/45752
vupen.com/english/advisories/2008/2779
nvd.nist.gov/vuln/detail/CVE-2008-5871
github.com/advisories/GHSA-vmvq-qvxq-35v9