CVE-2008-6576

Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service (resource exhaustion and failed updates) via unknown vectors that causes consumption of all available sessions.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.voipshield.com/research-details.php?id=11
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455	Vendor Advisory
http://securitytracker.com/id?1019845
http://osvdb.org/44380
http://secunia.com/advisories/29747
http://www.securityfocus.com/bid/28691
https://exchange.xforce.ibmcloud.com/vulnerabilities/41804

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*

Information

Published : 2009-04-01 15:30

Updated : 2017-08-16 18:29

NVD link : CVE-2008-6576

Mitre link : CVE-2008-6576

JSON object : View

CWE

NVD-CWE-noinfo

Advertisement

Products Affected

nortel

cs1000

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.voipshield.com/research-details.php?id=11", "name": "http://www.voipshield.com/research-details.php?id=11", "tags": [], "refsource": "MISC"}, {"url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455", "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://securitytracker.com/id?1019845", "name": "1019845", "tags": [], "refsource": "SECTRACK"}, {"url": "http://osvdb.org/44380", "name": "44380", "tags": [], "refsource": "OSVDB"}, {"url": "http://secunia.com/advisories/29747", "name": "29747", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/28691", "name": "28691", "tags": [], "refsource": "BID"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41804", "name": "nortel-ftp-dos(41804)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the \"session limitation technique\" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service (resource exhaustion and failed updates) via unknown vectors that causes consumption of all available sessions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2008-6576", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2009-04-01T22:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:nortel:cs1000:4.50:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-17T01:29Z"}