FKIE_CVE-2007-5639

Vulnerability from fkie_nvd - Published: 2007-10-23 17:46 - Updated: 2026-06-16 22:46
Severity
Summary
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.
References
cve@mitre.orghttp://securityreason.com/securityalert/3273
cve@mitre.orghttp://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654715Patch
cve@mitre.orghttp://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txtExploit
cve@mitre.orghttp://www.securityfocus.com/archive/1/482480/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/26122Patch
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/37253
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/3273
af854a3a-2127-422b-91ae-364da2661108http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=654715Patch
af854a3a-2127-422b-91ae-364da2661108http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txtExploit
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/482480/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/26122Patch
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/37253
Impacted products
Vendor Product Version
nortel ip_audio_conference_phone_2033 *
nortel ip_phone_1110 *
nortel ip_phone_1120e *
nortel ip_phone_1140e *
nortel ip_phone_1150e *
nortel ip_phone_2001 *
nortel ip_phone_2002 *
nortel ip_phone_2004 *
nortel wlan_handset_2210 *
nortel wlan_handset_2211 *
nortel wlan_handset_2212 *
nortel wlan_handset_6120 *
nortel wlan_handset_6140 *
nortel ip_softphone_2050 *
nortel mobile_voice_client_2050 *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nortel:ip_audio_conference_phone_2033:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3725D9C-E702-45F8-A647-BAA86EA060C6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_1110:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC7EA846-6B58-4F88-91B2-770388BE5E2C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_1120e:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9593EEF-CAC3-455B-972D-5DD2FE4802C2",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_1140e:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1482953-C22F-4FA7-B262-52B136F578CB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_1150e:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "64B644B1-F5B9-4420-9908-CB4770B3F600",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_2001:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "645B8DCD-27BB-46B2-A41E-4EBC0674AD4C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_2002:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D52E4B37-7699-41D0-A9B7-965A01808607",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:ip_phone_2004:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD0A3FFE-C169-4C4B-8DDD-B5EFA9ACE238",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_2210:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7F1EFF9-42CB-4F10-940F-E397ED56D423",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_2211:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A490C36-F529-4448-A8DE-BE2C74041E19",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_2212:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7A9DC40-0269-403C-8D86-4EE094C5493E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_6120:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "54772D2C-5460-4C63-A22A-DBBC497BFBA6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:nortel:wlan_handset_6140:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "52D18F26-40F0-4041-95B0-6A2153DD1261",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A140A10-720D-4FF5-9559-184D9AC33509",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nortel:mobile_voice_client_2050:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "48E2627D-3244-4A66-9EF6-B790EEFD0D4A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server."
    },
    {
      "lang": "es",
      "value": "El Nortel UNIStim IP Softphone 2050, IP Phone 1140E, y otros Nortel IP Phone, Mobile Voice Client, y productos WLAN Handsets permite a atacantes remotos provocar denegaci\u00f3n de servicio (cuelgue del dispositivo) a trav\u00e9 sd eun flujo de mensajes Mute y UnMute que tienen una fuente de direcci\u00f3n IP falsa para el Signaling Server."
    }
  ],
  "id": "CVE-2007-5639",
  "lastModified": "2026-06-16T22:46:32.987",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-10-23T17:46:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/3273"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=654715"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/482480/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/26122"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37253"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/3273"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=654715"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.csnc.ch/static/advisory/csnc/nortel_IP_phone_flooding_denial_of_service_v1.0.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/482480/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/26122"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37253"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.