Nortel Multimedia PC Client Remote Packet Flood Denial of Service Vulnerability

Bugtraq ID:	28994
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-2218
Remote:	Yes
Local:	No
Published:	Apr 30 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	Parvez Anwar
Vulnerable:	Nortel Networks Multimedia PC Client 4.0 Nortel Networks Multimedia PC Client 3.5 Nortel Networks Multimedia PC Client 0
Not Vulnerable:	Nortel Networks Multimedia PC Client 4.0.25 .3 Nortel Networks Multimedia PC Client 3.5.8 .3

Nortel Multimedia PC Client Remote Packet Flood Denial of Service Vulnerability

Nortel Multimedia PC Client is prone to a remote denial-of-service vulnerability because it fails to properly handle unexpected network traffic.

Successful attacks can crash the application, denying service to legitimate users. Given the nature of this issue, remote code execution may also be possible, but this has not been confirmed.

Nortel Multimedia PC Client Remote Packet Flood Denial of Service Vulnerability

To trigger this issue, attackers can use the Nessus 'Generic Flood' denial-of-service plugin.

Nortel Multimedia PC Client Remote Packet Flood Denial of Service Vulnerability

Solution:
The vendor has released an advisory along with fixes to address this issue. Please see the references for information on obtaining and applying fixes.

Nortel Multimedia PC Client Remote Packet Flood Denial of Service Vulnerability

References:

• Multimedia PC Client Product Page (Nortel Networks)
  
• Multimedia PC Client - Potential Vulnerability Due to Buffer Overflow (Nortel Networks)