CVE-2007-5591 Denial of service in n/a
Remote attackers can cause telephony outages by flooding packets to ELAN ports on Nortel CS1000 signaling servers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-5591?
CVE-2007-5591 is a high-severity denial of service vulnerability in n/a, published on 19 Oct 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service (telephony application outage) via a flood of packets to Embedded LAN (ELAN) ports.
Which versions are affected by CVE-2007-5591?
It affects 5 products.
Products include Nortel Meridian Option 11c, Nortel Meridian Option 51c, Nortel Meridian Option 61c, Nortel Meridian Option 81c, Nortel Voip-Core-Cs.
How do I fix CVE-2007-5591?
No fix has been published for CVE-2007-5591 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2007-5591 being exploited?
There is no known exploitation of CVE-2007-5591 in the wild and no public exploit code.
Sources
Also known as GHSA-pwh2-rcv8-v6g8.