CVE-2004-0056

Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.cert.org/advisories/CA-2004-01.html	Patch Third Party Advisory US Government Resource
http://www.kb.cert.org/vuls/id/749342	Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/9406
http://www.securitytracker.com/id?1008687
http://www.uniras.gov.uk/vuls/2004/006489/h323.htm

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nortel:business_communications_manager::::::::
	cpe:2.3:h:nortel:802.11_wireless_ip_gateway::::::::
	cpe:2.3:h:nortel:succession_communication_server_1000::::::::

History

No history.

Information

Published : 2004-02-17 05:00

Updated : 2024-02-28 10:24

NVD link : CVE-2004-0056

Mitre link : CVE-2004-0056

CVE.ORG link : CVE-2004-0056

JSON object : View

Products Affected

nortel

succession_communication_server_1000
802.11_wireless_ip_gateway
business_communications_manager

CWE

NVD-CWE-Other

{"id": "CVE-2004-0056", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-02-17T05:00:00.000", "references": [{"url": "http://www.cert.org/advisories/CA-2004-01.html", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/749342", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/9406", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1008687", "source": "cve@mitre.org"}, {"url": "http://www.uniras.gov.uk/vuls/2004/006489/h323.htm", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades en la implementaci\u00f3n del protocolo H.323 en Nortel Networks Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, y 802.11 Wireless IP Gateway permite a atacantes remotos causar una denegaci\u00f3n de servicio y posiblemente ejecutar c\u00f3digo arbitrario, como se demostr\u00f3 mediante el grupo de pruebas NISCC/OUSPG PROTOS para el protocolo H.225."}], "lastModified": "2008-09-05T20:37:23.210", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nortel:business_communications_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF566B8B-8B96-4D21-A351-A384D4158449"}, {"criteria": "cpe:2.3:h:nortel:802.11_wireless_ip_gateway:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5052ED35-0CE3-461F-8766-CB459EA3FFA0"}, {"criteria": "cpe:2.3:h:nortel:succession_communication_server_1000:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A0CB855-CDD4-42B7-9328-64B10F5A3A4D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}