Nortel MCS 5100 UFTP Multiple Denial of Service Vulnerabilities

Bugtraq ID:	31633
Class:	Unknown
CVE:	CVE-2008-5872
Remote:	Yes
Local:	No
Published:	Oct 08 2008 12:00AM
Updated:	Apr 16 2015 05:52PM
Credit:	VoIPshield Systems Inc.
Vulnerable:	Nortel Networks Multimedia Communications Server 5100 3.0.13 Nortel Networks MCS 5100 3.0
Not Vulnerable:

Nortel MCS 5100 UFTP Multiple Denial of Service Vulnerabilities

Nortel Multimedia Communications Server (MCS) 5100 is prone to multiple denial-of-service vulnerabilities because it fails to handle certain UNIStem File Transfer Protocol (UFTP) data.

Versions of MCS 5100 in the 3.0 series are vulnerable.

Nortel MCS 5100 UFTP Multiple Denial of Service Vulnerabilities

Attackers can use readily available networking utilities to leverage these issues.

Nortel MCS 5100 UFTP Multiple Denial of Service Vulnerabilities

Solution:
The vendor has reported that this issue will be fixed in MCS 5100 3.5.9; please see the references for more information.

Nortel MCS 5100 UFTP Multiple Denial of Service Vulnerabilities

References:

• Nortel Networks Homepage (Nortel Networks)
  
• Nortel Multimedia Communications Server 5100 IP Client Manager UNIStim File Tran (VoIPshield Systems)
  
• Nortel Response to VoIPshield VSRNT-2008-011 - MCS 5100 IPCM UFTP Multiple DoS V (Nortel Networks)