Nortel vulnerabilities

Products

• Contivity 9
• Mobile Voice Client 2050 6
• Business Communications Manager 5
• Ip Softphone 2050 5
• Cs1000 4
• Meridian Option 11c 4
• Meridian Option 51c 4
• Meridian Option 61c 4
• Meridian Option 81c 4
• Vpn Router 5000 4
• Centrex Ip Client Manager 3
• Centrex Ip Element Manager 3
• Meridian Sl100 3
• Callpilot 2
• Multimedia Communication Server 5100 2
• Optivity Telephony Manager 2
• Succession Communication Server 1000 2
• Symposium Web Centre Portal 2
• Symposium Web Client 2
• Vpn Router 1010 2
• Vpn Router 1050 2
• Vpn Router 1100 2
• Vpn Router 1700 2
• Vpn Router 1740 2
• Vpn Router 2700 2

Newest

• nortel cs1000 Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application... CVE-2008-6579 5.0 MediumApril 1, 2009
• nortel cs1000 Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote... CVE-2008-6578 10.0 HighApril 1, 2009
• nortel cs1000 Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x... CVE-2008-6577 10.0 HighApril 1, 2009
• nortel cs1000 Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel... CVE-2008-6576 7.8 HighApril 1, 2009
• nortel communication server 1000, unistim protocol +1 more Nortel UNIStim protocol, as used in Communication Server 1000 and other products, uses... CVE-2008-6564 7.6 HighMarch 31, 2009
• nortel multimedia communication server 5100 Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in... CVE-2008-5872 7.8 HighJanuary 8, 2009
• nortel multimedia communication server 5100 Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call... CVE-2008-5871 6.4 MediumJanuary 8, 2009
• nortel unistim ip phone Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service ... CVE-2008-4999 Public exploit 7.8 HighNovember 7, 2008
• nortel sip multimedia pc client Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent... CVE-2008-3157 5.0 MediumJuly 11, 2008
• nortel multimedia communications server Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS)... CVE-2008-2218 5.0 MediumMay 14, 2008
• nortel business communications manager, centrex ip client manager, centrex ip element manager +6 more +8 more The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP... CVE-2007-5640 7.1 HighOctober 23, 2007
• nortel ip softphone 2050, mobile voice client 2050 +1 more The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice... CVE-2007-5639 7.1 HighOctober 23, 2007
• nortel business communications manager, centrex ip client manager, centrex ip element manager +6 more +8 more The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP... CVE-2007-5638 4.3 MediumOctober 23, 2007
• nortel business communications manager, centrex ip client manager, centrex ip element manager +6 more +8 more The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP... CVE-2007-5637 Public exploit 4.3 MediumOctober 23, 2007
• nortel ip softphone 2050 Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial... CVE-2007-5636 Public exploit 7.5 HighOctober 23, 2007
• nortel voip-core-cs, meridian option 11c, meridian option 51c +2 more +4 more The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise... CVE-2007-5591 7.8 HighOctober 19, 2007
• nortel sip softphone Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5... CVE-2007-3438 7.8 HighJune 27, 2007
• nortel pc client soft phone sip The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a... CVE-2007-3361 7.8 HighJune 22, 2007
• nortel communications server Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E,... CVE-2007-2886 5.0 MediumMay 30, 2007
• nortel contivity, vpn router 5000 +1 more Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before... CVE-2007-2334 7.5 HighApril 27, 2007
• nortel contivity, vpn router 5000, vpn router portfolio +2 more Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before... CVE-2007-2333 10.0 HighApril 27, 2007
• nortel vpn router 1010, vpn router 1050, vpn router 1100 +5 more +7 more Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key... CVE-2007-2332 9.0 HighApril 27, 2007
• nortel callpilot, meridian mail +1 more Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon... CVE-2007-1820 9.3 HighApril 2, 2007
• nortel net direct client The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070... CVE-2007-1057 Public exploit 6.9 MediumFebruary 21, 2007
• nortel callpilot server Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors,... CVE-2006-6670 10.0 HighDecember 20, 2006
• nortel ssl vpn tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands... CVE-2005-4197 Public exploit EPSS 11.9% 7.5 HighDecember 13, 2005
• nortel contivity Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as... CVE-2005-2579 7.2 HighAugust 16, 2005
• alaxala networks, cisco agent desktop, aironet ap1200 +73 more +75 more Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the... CVE-2005-0356 Public exploit EPSS 82.8% 5.0 MediumMay 31, 2005
• nortel contivity, vpn router 1010, vpn router 1050 +6 more +8 more Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash)... CVE-2005-1802 5.0 MediumMay 27, 2005
• nortel contivity Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process,... CVE-2005-0844 4.6 MediumMarch 24, 2005
• nortel contivity Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does... CVE-2004-2621 4.0 MediumDecember 31, 2004
• nortel wlan access point 2220, wlan access point 2221, wlan access point 2225 +2 more Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause... CVE-2004-2549 Public exploit EPSS 10.5% 5.0 MediumDecember 31, 2004
• microsoft windows 2000, windows nt, windows xp +16 more +18 more The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP... CVE-2004-1305 Public exploit EPSS 58.6% 5.0 MediumDecember 23, 2004
• microsoft windows 2000, windows 2003 server, windows 98 +6 more +8 more The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into... CVE-2004-1319 EPSS 26.9% 5.0 MediumDecember 15, 2004
• nortel contivity Nortel Networks Contivity VPN Client displays a different error message depending on whether the... CVE-2004-1105 5.0 MediumDecember 1, 2004
• microsoft ie, internet explorer, windows xp +15 more +17 more Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote... CVE-2004-0839 EPSS 34.0% 5.0 MediumAugust 18, 2004
• nortel 802.11 wireless ip gateway, business communications manager, succession communication server 1000 +2 more Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business... CVE-2004-0056 7.5 HighJanuary 15, 2004
• nortel succession communication server 2000 The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication... CVE-2003-1115 7.5 HighDecember 31, 2003
• nortel cvx 1800 multi-service access switch Nortel CVX 1800 is installed with a default "public" community string, which allows remote... CVE-2002-0540 Public exploit EPSS 19.9% 7.5 HighJune 11, 2002
• nortel alteon acedirector Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based... CVE-2002-0209 Public exploit 5.0 MediumMay 16, 2002
• nortel nautica marlin The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length... CVE-2000-0221 Public exploit 5.0 MediumFebruary 25, 2000
• nortel contivity cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of... CVE-2000-0064 5.0 MediumJanuary 17, 2000
• nortel contivity cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary... CVE-2000-0063 5.0 MediumJanuary 17, 2000
• nortel optivity net architect The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding... CVE-2000-0009 Public exploit 7.2 HighDecember 29, 1999