Some vulnerabilities have been reported in Nortel Multimedia Communication Server 5100, which can be exploited by malicious people to bypass certain security restrictions, conduct spoofing attacks, or cause a DoS (Denial of Service).

1) An implementation error in the call placement mechanism can be exploited to spoof or redirect calls.

2) Multiple errors exist in the implementation of the UNIStim File Transfer Protocol (UFTP). These can be exploited to cause a DoS via UFTP messages containing specially crafted "Connection Details" fields.

The vulnerabilities are reported in version 3.0.13. Other versions may also be affected.

Solution
Use the product only in a trusted network environment.
Further details available to Secunia VIM customers

Provided and/or discovered by
VoIPshield

Changelog
Further details available to Secunia VIM customers

Original Advisory
Nortel:
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=774845

VoIPshield:
http://voipshield.com/research-details.php?id=119
http://voipshield.com/research-details.php?id=120

Deep Links
Links available to Secunia VIM customers