CVE-2008-2218 Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS) before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service (crash)...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS) before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service (crash) via a flood of "extraneous" messages, as demonstrated by the Nessus "Generic flood" denial of service plugin.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nortel multimedia communications server | <= 3.5.8.3 | No fix listed |
| nortel multimedia communications server | <= 4.0.25.3 | No fix listed |
References
- 30038 third-party-advisory vendor-advisory
- support.nortel.com
- 28994 vdb-entry
- 1019957 vdb-entry
- ADV-2008-1404 vdb-entry
- nortel-mcs-client-bo(42115) vdb-entry