FKIE_CVE-2007-5591

Vulnerability from fkie_nvd - Published: 2007-10-19 23:17 - Updated: 2026-06-16 22:46
Severity
Summary
The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service (telephony application outage) via a flood of packets to Embedded LAN (ELAN) ports.
References
cve@mitre.orghttp://osvdb.org/41799
cve@mitre.orghttp://secunia.com/advisories/27282Vendor Advisory
cve@mitre.orghttp://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655204
cve@mitre.orghttp://www.csnc.ch/static/advisory/csnc/nortel_telephony_server_denial_of_service_v1.0.txt
cve@mitre.orghttp://www.securityfocus.com/archive/1/482484/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/26113
cve@mitre.orghttp://www.vupen.com/english/advisories/2007/3536Vendor Advisory
cve@mitre.orghttp://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/42/022871-01.pdf
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/37252
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/41799
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/27282Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655204
af854a3a-2127-422b-91ae-364da2661108http://www.csnc.ch/static/advisory/csnc/nortel_telephony_server_denial_of_service_v1.0.txt
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/482484/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/26113
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/3536Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/42/022871-01.pdf
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/37252
Impacted products
Vendor Product Version
nortel communications_server 1000e
nortel communications_server 1000m
nortel communications_server 1000s
nortel meridian_option_11c *
nortel meridian_option_51c *
nortel meridian_option_61c *
nortel meridian_option_81c *
nortel voip-core-cs 1000e
nortel voip-core-cs 1000m
nortel voip-core-cs 1000s
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nortel:communications_server:1000e:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EDBAFA1-329A-4321-990F-9B0972D286E8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:nortel:communications_server:1000m:*:*:*:*:*:*:*",
              "matchCriteriaId": "9559937B-8F87-49AB-B572-2DB3477CB1BB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:nortel:communications_server:1000s:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA45C92F-3CDF-41A3-BD3F-E9725338E61F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nortel:meridian_option_11c:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C791034-CF75-4779-AB1B-DF7A67361A85",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nortel:meridian_option_51c:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5D5C794-DF6D-492F-B34B-CDBB364C7168",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nortel:meridian_option_61c:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9CBF345-9D72-459A-ADA2-33DE3A25D156",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nortel:meridian_option_81c:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B726AC5D-3270-40D8-9783-F068A682A82D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nortel:voip-core-cs:1000e:*:enterprise:*:*:*:*:*",
              "matchCriteriaId": "A739F443-E975-4D31-8207-941FA775F2CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nortel:voip-core-cs:1000m:*:enterprise:*:*:*:*:*",
              "matchCriteriaId": "4173D37F-FEB0-4F4D-8687-6869767A90C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nortel:voip-core-cs:1000s:*:enterprise:*:*:*:*:*",
              "matchCriteriaId": "7B4D3BC0-31E3-4A02-ACBC-BEB392BC2A1C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service (telephony application outage) via a flood of packets to Embedded LAN (ELAN) ports."
    },
    {
      "lang": "es",
      "value": "El servidor de se\u00f1alizaci\u00f3n CS1000 en Nortel Enterprise VoIP-Core-CS 1000M Chasis/Cabinet, Enterprise VoIP-Core-CS 1000E y 1000S, Meridian-Core-Option 11C Chassis and Cabinet, y Meridian-Core-Option 51C, 61C y 81C, permite a atacantes remotos causar una denegaci\u00f3n de servicio (interrupci\u00f3n de la aplicaci\u00f3n de telefon\u00eda) por medio de una inundaci\u00f3n de paquetes hacia puertos Embedded LAN (ELAN)."
    }
  ],
  "id": "CVE-2007-5591",
  "lastModified": "2026-06-16T22:46:27.427",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-10-19T23:17:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/41799"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/27282"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=655204"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.csnc.ch/static/advisory/csnc/nortel_telephony_server_denial_of_service_v1.0.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/482484/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/26113"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/3536"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/42/022871-01.pdf"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37252"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/41799"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/27282"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026id=655204"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.csnc.ch/static/advisory/csnc/nortel_telephony_server_denial_of_service_v1.0.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/482484/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/26113"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/3536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/42/022871-01.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37252"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.