CVE-2007-2886: Medium severity Nortel Communications Server vulnerability

Published May 30, 2007

Updated

Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service (card hang) via unspecified vectors.

Affected Software

6 affected components

Nortel Communications Server=1000m

Nortel Communications Server=1000e

Nortel Communications Server=1000s

Nortel Communications Server=1000m

Remediation

Patch Available

http://www.securityfocus.com/bid/24131

Event History

May 30, 2007

CVE Published

01:30 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2886?

CVE-2007-2886 has a moderate severity rating as it allows remote attackers to cause a denial of service on the Nortel CS 1000 M media card.

How do I fix CVE-2007-2886?

To resolve CVE-2007-2886, upgrading the Nortel CS 1000 M media card firmware to a version released after May 23, 2007, is recommended.

What systems are affected by CVE-2007-2886?

CVE-2007-2886 affects Nortel CS 1000E, 1000M, and 1000S media cards with versions before 04.50W.

What type of attack is possible through CVE-2007-2886?

CVE-2007-2886 allows attackers to execute a denial of service attack leading to card hang issues.

Is there a patch available for CVE-2007-2886?

Yes, Nortel has provided firmware updates that serve as a patch for CVE-2007-2886.