CVE-2004-0056

Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.cert.org/advisories/CA-2004-01.html	Patch Third Party Advisory US Government Resource
http://www.kb.cert.org/vuls/id/749342	Patch Third Party Advisory US Government Resource
http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
http://www.securityfocus.com/bid/9406
http://www.securitytracker.com/id?1008687

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:nortel:802.11_wireless_ip_gateway::::::::
	cpe:2.3:a:nortel:business_communications_manager::::::::
	cpe:2.3:h:nortel:succession_communication_server_1000::::::::

Information

Published : 2004-02-16 21:00

Updated : 2008-09-05 13:37

NVD link : CVE-2004-0056

Mitre link : CVE-2004-0056

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

nortel

802.11_wireless_ip_gateway
succession_communication_server_1000
business_communications_manager

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.cert.org/advisories/CA-2004-01.html", "name": "CA-2004-01", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "refsource": "CERT"}, {"url": "http://www.kb.cert.org/vuls/id/749342", "name": "VU#749342", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.uniras.gov.uk/vuls/2004/006489/h323.htm", "name": "http://www.uniras.gov.uk/vuls/2004/006489/h323.htm", "tags": [], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/9406", "name": "9406", "tags": [], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id?1008687", "name": "1008687", "tags": [], "refsource": "SECTRACK"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-0056", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2004-02-17T05:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:nortel:802.11_wireless_ip_gateway:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:nortel:business_communications_manager:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:nortel:succession_communication_server_1000:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2008-09-05T20:37Z"}