CVE-2008-4999: Input Validation
Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4999?
CVE-2008-4999 is considered to be a denial of service vulnerability affecting Nortel Networks UNIStim IP Phone 0604DAS.
How do I fix CVE-2008-4999?
Fixing CVE-2008-4999 may involve applying any available firmware updates from Nortel or implementing network measures to filter out malicious ping packets.
Who is affected by CVE-2008-4999?
CVE-2008-4999 affects users of the Nortel Networks UNIStim IP Phone model 0604DAS.
What type of attack does CVE-2008-4999 exploit?
CVE-2008-4999 exploits a vulnerability that allows attackers to crash the device using a long ping packet.
Can CVE-2008-4999 be exploited remotely?
Yes, CVE-2008-4999 can be exploited by remote attackers to cause a denial of service on affected devices.